Skip to content

Commit ad7de46

Browse files
authored
Merge pull request #65099 from mburke5678/admission-fix-errors
Admission controller docs fixes during ROSA review
2 parents a92b2ba + 2b23a53 commit ad7de46

File tree

3 files changed

+42
-1
lines changed

3 files changed

+42
-1
lines changed

architecture/admission-plug-ins.adoc

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -6,6 +6,9 @@ include::_attributes/common-attributes.adoc[]
66

77
toc::[]
88

9+
// Sentence taken from Architecture -> Index.
10+
Admission plugins are used to help regulate how {product-title} functions.
11+
912
// Concept modules
1013
include::modules/admission-plug-ins-about.adoc[leveloffset=+1]
1114

modules/admission-plug-ins-about.adoc

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -6,7 +6,7 @@
66
[id="admission-plug-ins-about_{context}"]
77
= About admission plugins
88

9-
Admission plugins are used to help regulate how {product-title} {product-version} functions. Admission plugins intercept requests to the master API to validate resource requests and ensure policies are adhered to, after the request is authenticated and authorized. For example, they are commonly used to enforce security policy, resource limitations or configuration requirements.
9+
Admission plugins intercept requests to the master API to validate resource requests. After a request is authenticated and authorized, the admission plugins ensure that any associated policies are followed. For example, they are commonly used to enforce security policy, resource limitations or configuration requirements.
1010

1111
Admission plugins run in sequence as an admission chain. If any admission plugin in the sequence rejects a request, the whole chain is aborted and an error is returned.
1212

Lines changed: 38 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,38 @@
1+
:_content-type: ASSEMBLY
2+
[id="rosa-admission-plug-ins"]
3+
= Admission plugins
4+
include::_attributes/common-attributes.adoc[]
5+
:context: admission-plug-ins
6+
7+
toc::[]
8+
9+
10+
Admission plugins are used to help regulate how {product-title} functions.
11+
12+
// Concept modules
13+
include::modules/admission-plug-ins-about.adoc[leveloffset=+1]
14+
15+
include::modules/admission-plug-ins-default.adoc[leveloffset=+1]
16+
17+
include::modules/admission-webhooks-about.adoc[leveloffset=+1]
18+
19+
include::modules/admission-webhook-types.adoc[leveloffset=+1]
20+
21+
// user (groups=["dedicated-admins" "system:authenticated:oauth" "system:authenticated"]) is attempting to grant RBAC permissions not currently held, clusterroles.rbac.authorization.k8s.io "system:openshift:online:my-webhook-server" not found, cannot get resource "rolebindings", cannot create resource "apiservices", cannot create resource "validatingwebhookconfigurations"
22+
ifndef::openshift-rosa,openshift-dedicated[]
23+
// Procedure module
24+
include::modules/configuring-dynamic-admission.adoc[leveloffset=+1]
25+
endif::openshift-rosa,openshift-dedicated[]
26+
27+
[role="_additional-resources"]
28+
[id="admission-plug-ins-additional-resources"]
29+
== Additional resources
30+
31+
ifndef::openshift-rosa,openshift-dedicated[]
32+
* xref: /networking/hardware_networks/configuring-sriov-operator.adoc#configuring-sriov-operator[Configuring the SR-IOV Network Operator]
33+
endif::openshift-rosa,openshift-dedicated[]
34+
35+
* xref:../nodes/scheduling/nodes-scheduler-taints-tolerations.adoc#nodes-scheduler-taints-tolerations_dedicating_nodes-scheduler-taints-tolerations[Controlling pod placement using node taints]
36+
37+
* xref:../nodes/pods/nodes-pods-priority.adoc#admin-guide-priority-preemption-names_nodes-pods-priority[Pod priority names]
38+

0 commit comments

Comments
 (0)