updating documentation

rancherfederal · May 22, 2024 · a7ab49a · a7ab49a
1 parent b0c6736
commit a7ab49a
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 0 deletions.
diff --git a/inventory/sample/group_vars/rke2_servers.yml b/inventory/sample/group_vars/rke2_servers.yml
@@ -49,4 +49,5 @@ rke2_config: {}
 # See https://ranchermanager.docs.rancher.com/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/psa-config-templates#exempting-required-rancher-namespaces
 # Available in RKE2 1.25+
 # Add a pod security admission config file by specifying the file path on the control host
+# Requires config.yaml to include `- admission-control-config-file=/etc/rancher/rke2/pod-security-admission-config.yaml` in order for this to be honored
 # pod_security_admission_config_file_path: "{{ playbook_dir }}/sample_files/pod-security-admission-config.yaml"
diff --git a/sample_files/pod-security-admission-config.yaml b/sample_files/pod-security-admission-config.yaml
@@ -1,3 +1,7 @@
+#This sample list was generated from:
+#https://ranchermanager.docs.rancher.com/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/psa-config-templates#exempting-required-rancher-namespaces
+#For security reasons, this list should be as concise as possible - only include active namespaces that need to be except from a restricted profile.
+
 ---
 apiVersion: apiserver.config.k8s.io/v1
 kind: AdmissionConfiguration