add DenyEscalatingExec admission controller (#1961)

Azure · Dec 21, 2017 · 13cd82d · 13cd82d
1 parent 3ac14a2
commit 13cd82d
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/parts/k8s/manifests/kubernetesmaster-kube-apiserver.yaml b/parts/k8s/manifests/kubernetesmaster-kube-apiserver.yaml
@@ -11,10 +11,10 @@ spec:
   containers:
     - name: "kube-apiserver"
       image: "<kubernetesHyperkubeSpec>"
-      command: 
+      command:
         - "/hyperkube"
         - "apiserver"
-        - "--admission-control=NamespaceLifecycle,LimitRanger,ServiceAccount,DefaultStorageClass,ResourceQuota"
+        - "--admission-control=NamespaceLifecycle,LimitRanger,ServiceAccount,DefaultStorageClass,ResourceQuota,DenyEscalatingExec"
         - "--address=0.0.0.0"
         - "--allow-privileged"
         - "--insecure-port=8080"