add DenyEscalatingExec admission controller
@@ -14,7 +14,7 @@ spec:
command:
- "/hyperkube"
- "apiserver"
- - "--admission-control=NamespaceLifecycle,LimitRanger,ServiceAccount,DefaultStorageClass,ResourceQuota"
+ - "--admission-control=NamespaceLifecycle,LimitRanger,ServiceAccount,DefaultStorageClass,ResourceQuota,DenyEscalatingExec"
- "--address=0.0.0.0"
- "--allow-privileged"
- "--insecure-port=8080"
