Skip to content

Commit 581c2b0

Browse files
committed
Update docs related to PersistentVolumeLabel admission control
The said admission controller is disabled by default in 1.11 (kubernetes/kubernetes#64326) and scheduled to be removed in future release.
1 parent b715200 commit 581c2b0

File tree

2 files changed

+6
-3
lines changed

2 files changed

+6
-3
lines changed

content/en/docs/reference/access-authn-authz/admission-controllers.md

+3-1
Original file line numberDiff line numberDiff line change
@@ -415,7 +415,9 @@ It helps ensure the Pods and the PersistentVolumes mounted are in the same
415415
region and/or zone.
416416
If the admission controller doesn't support automatic labelling your PersistentVolumes, you
417417
may need to add the labels manually to prevent pods from mounting volumes from
418-
a different zone. PersistentVolumeLabel is DEPRECATED and labeling persistent volumes has been taken over by [cloud controller manager](/docs/tasks/administer-cluster/running-cloud-controller/).
418+
a different zone. PersistentVolumeLabel is DEPRECATED and labeling persistent volumes has been taken over by
419+
[cloud controller manager](/docs/tasks/administer-cluster/running-cloud-controller/).
420+
Starting from 1.11, this admission controller is disabled by default.
419421

420422
### PodNodeSelector
421423

content/en/docs/tasks/administer-cluster/running-cloud-controller.md

+3-2
Original file line numberDiff line numberDiff line change
@@ -32,7 +32,8 @@ Successfully running cloud-controller-manager requires some changes to your clus
3232

3333
* `kube-apiserver` and `kube-controller-manager` MUST NOT specify the `--cloud-provider` flag. This ensures that it does not run any cloud specific loops that would be run by cloud controller manager. In the future, this flag will be deprecated and removed.
3434
* `kubelet` must run with `--cloud-provider=external`. This is to ensure that the kubelet is aware that it must be initialized by the cloud controller manager before it is scheduled any work.
35-
* `kube-apiserver` SHOULD NOT run the `PersistentVolumeLabel` admission controller since the cloud controller manager takes over labeling persistent volumes. To prevent the PersistentVolumeLabel admission plugin from running in `kube-apiserver`, include the `PersistentVolumeLabel` as a listed value in the `--disable-admission-plugins` flag.
35+
* `kube-apiserver` SHOULD NOT run the `PersistentVolumeLabel` admission controller
36+
since the cloud controller manager takes over labeling persistent volumes.
3637
* For the `cloud-controller-manager` to label persistent volumes, initializers will need to be enabled and an InitializerConifguration needs to be added to the system. Follow [these instructions](/docs/admin/extensible-admission-controllers.md#enable-initializers-alpha-feature) to enable initializers. Use the following YAML to create the InitializerConfiguration:
3738

3839
{{< code file="persistent-volume-label-initializer-config.yaml" >}}
@@ -48,7 +49,7 @@ As of v1.8, cloud controller manager can implement:
4849
* node controller - responsible for updating kubernetes nodes using cloud APIs and deleting kubernetes nodes that were deleted on your cloud.
4950
* service controller - responsible for loadbalancers on your cloud against services of type LoadBalancer.
5051
* route controller - responsible for setting up network routes on your cloud
51-
* [PersistentVolumeLabel Admission Controller](/docs/admin/admission-controllers#persistentvolumelabel) - responsible for labeling persistent volumes on your cloud - ensure that the persistent volume label admission plugin is not enabled on your kube-apiserver.
52+
* persistent valume labels controller - responsible for setting the zone and region labels on PersistentVolumes created in GCP and AWS clouds.
5253
* any other features you would like to implement if you are running an out-of-tree provider.
5354

5455

0 commit comments

Comments
 (0)