From 39260bb2080273e636dae933e8052c66d176ae40 Mon Sep 17 00:00:00 2001 From: CecileRobertMichon Date: Fri, 12 Jan 2018 13:22:56 -0800 Subject: [PATCH] remove SecurityContextDeny --- pkg/acsengine/defaults-apiserver.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pkg/acsengine/defaults-apiserver.go b/pkg/acsengine/defaults-apiserver.go index 724efc099b..d2b437a3ff 100644 --- a/pkg/acsengine/defaults-apiserver.go +++ b/pkg/acsengine/defaults-apiserver.go @@ -82,7 +82,7 @@ func setAPIServerConfig(cs *api.ContainerService) { // Default apiserver config defaultAPIServerConfig := map[string]string{ - "--admission-control": "NamespaceLifecycle,LimitRanger,ServiceAccount,DefaultStorageClass,ResourceQuota,DenyEscalatingExec,AlwaysPullImages,SecurityContextDeny", + "--admission-control": "NamespaceLifecycle,LimitRanger,ServiceAccount,DefaultStorageClass,ResourceQuota,DenyEscalatingExec,AlwaysPullImages", "--authorization-mode": "Node", }