Node Restriction Add-on

With Kubernetes, you can enable admission add-ons to limit and manage Kubernetes API objects (like pods, Services, and Deployments) prior to modifying them within a cluster.

This add-on allows the kubelet of a node to operate only the objects of the current node for enhanced isolation in multi-tenant scenarios or the scenarios with high security requirements. Unless otherwise specified, keep the default settings. For details, see the official documentation.

Value Range

true or false

Configure the list of plugins to be enabled as needed. Unless otherwise specified, keep the default settings.

Default Value

true

Modifiable

Yes

Scope

CCE standard and CCE Turbo clusters

Suggestions

Ensure that you comprehend the impact of the desired plugins. Enabling a plugin for a cluster without assessing it can result in the cluster behaving unexpectedly.