UPSTREAM: <carry>: protect key openshift namespaces
@@ -53,7 +53,14 @@ const (
// Register registers a plugin
func Register(plugins *admission.Plugins) {
plugins.Register(PluginName, func(config io.Reader) (admission.Interface, error) {
- return NewLifecycle(sets.NewString(metav1.NamespaceDefault, metav1.NamespaceSystem, metav1.NamespacePublic, "openshift", "openshift-infra"))
+ return NewLifecycle(sets.NewString(metav1.NamespaceDefault, metav1.NamespaceSystem, metav1.NamespacePublic,
+ // user specified configuration that cannot be rebuilt
+ "openshift-config",
+ // the CVO which is the root we use to rebuild all the rest
+ "openshift-cluster-version",
+ // contains a namespaced list of all nodes in the cluster (yeah, weird. they do it for multi-tenant management I think?)
+ "openshift-cluster-api",
+ ))
})
}
