You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: content/en/docs/operating/setup/installation.md
+14-14Lines changed: 14 additions & 14 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -58,7 +58,7 @@ Perform the following steps to install the capsule Operator:
58
58
59
59
Here are some key considerations to keep in mind when installing Capsule. Also check out the **[Best Practices](/docs/operating/best-practices)** for more information.
60
60
61
-
### Admission Policies
61
+
### Admission Policies
62
62
63
63
While Capsule provides a robust framework for managing multi-tenancy in Kubernetes, it does not include built-in admission policies for enforcing specific security or operational standards for all possible aspects of a Kubernetes cluster. Therefore, it is recommended to use additional tools like [Kyverno](https://kyverno.io/) to enforce admission policies that align with your organization's requirements.
64
64
@@ -102,7 +102,7 @@ Or you could at least consider to set the failure policy to `Ignore`:
102
102
```yaml
103
103
webhooks:
104
104
hooks:
105
-
nodes:
105
+
nodes:
106
106
failurePolicy: Ignore
107
107
```
108
108
@@ -111,7 +111,7 @@ If you still want to use the feature, you could execlude the kube-system namespa
111
111
```yaml
112
112
webhooks:
113
113
hooks:
114
-
nodes:
114
+
nodes:
115
115
matchConditions:
116
116
- name: 'exclude-kubelet-requests'
117
117
expression: '!("system:nodes" in request.userInfo.groups)'
@@ -126,7 +126,7 @@ Namespaces are the most important resource in Capsule. The Namespace Webhook is
126
126
```yaml
127
127
webhooks:
128
128
hooks:
129
-
namespaces:
129
+
namespaces:
130
130
matchConditions:
131
131
- name: 'exclude-kube-system'
132
132
expression: '!("system:serviceaccounts:kube-system" in request.userInfo.groups)'
0 commit comments