services.kubernetes.apiserver.enableAdmissionPlugins
Kubernetes admission control plugins to enable. See https://kubernetes.io/docs/admin/admission-controllers/
- Type
list of string- Default
[ "NamespaceLifecycle" "LimitRanger" "ServiceAccount" "ResourceQuota" "DefaultStorageClass" "DefaultTolerationSeconds" "NodeRestriction" ]- Example
[ "NamespaceLifecycle" "NamespaceExists" "LimitRanger" "SecurityContextDeny" "ServiceAccount" "ResourceQuota" "PodSecurityPolicy" "NodeRestriction" "DefaultStorageClass" ]- Declared
- <nixpkgs/nixos/modules/services/cluster/kubernetes/apiserver.nix>