Skip to content

Latest commit

 

History

History
26 lines (18 loc) · 1.17 KB

README.md

File metadata and controls

26 lines (18 loc) · 1.17 KB
Raw

K8s Admission Controller

  • Injects tcpdump container as a sidecar by object-label (tcpdump-enabled: "true") while creating PODs.
  • Written in Golang.

Apply commands on Provision.sh

  1. Docker Image Build (Go Server)

  2. Create CA and Client Certificates (CloudFlare SSL)

  3. Create secret file with client certificates (./manifests/webhook-secrets.yaml)

  4. Create webhook configuration with ca bundle (./manifests/webhook-configuration.yaml)

  5. Apply secret resources (./manifests/webhook-secrets.yaml)

  6. Create serviceaccount (./manifests/webhook-rbac.yaml)

  7. Create deployment and svc for webhook server (./manifests/webhook-deployment-svc.yaml)

  8. Create mutatingwebhookconfiguration (./manifests/webhook-configuration.yaml)

  • Change docker image name before STEP 1

    • Update container's image (./manifests/webhook-deployment-svc.yaml)

  • Change hostname according to webhook name and namespace before STEP 2

    • Update serviceaccount's namespace (./manifests/webhook-rbac.yaml)
    • Update deplomyent's and svc's namespace and webhook name (./manifests/webhook-deployment-svc.yaml)
    • Update clientConfig's namespace and svc (./manifests/webhook-configuration-template.yaml)