liangrog / admission-webhook-server Goto Github PK
View Code? Open in Web Editor NEWAPI server providing Webhook endpoints for Kubernetes admission controller to mutate objects
License: Apache License 2.0
API server providing Webhook endpoints for Kubernetes admission controller to mutate objects
License: Apache License 2.0
admission-webhook-server
is failing with following error :
2020/08/20 06:59:07 Registering handlers...
2020/08/20 06:59:07 PodNodesSelector registered using path /mutate/pod-nodes-selector
2020/08/20 06:59:07 Starting admission webhook server...
2020/08/20 06:59:07 tls: failed to find any PEM data in certificate input
List of files generated after running ssl.sh
script :
sh ssl.sh admission-webhook.tools.svc
ca.crt
ca.key
ca.srl
server.pem
tls.crt
tls.key
Namespace : tools
already exist.
Following is helm installation command I used :
helm install . --name admission-webhook-server --namespace tools
I want it to be cluster wide.
I installed "admission-webhook-server" by following the steps given in README.
Installation and normal functionality is working well but 1 side effect i observed is: When we create Daemonset in bound namespaces then pods for that daemonset stays in pending state.
Reason is it can not find nodeSelector label on the other nodes.
If there is any option to ignore node-binding for daemonsets then it will be really very helpful
Here are the list of features/fixes are proposed for v1.1.0-rc:
DaemonSet:
Namespace configuration
Hi , i am getting the below ssl handshake error. Pleaes suggest how to solve this.
installation step
helm upgrade --install admission-webhook-server . --recreate-pods
values.yaml
---
# Override resource name
#nameOverride
# Override url base path. Default to mutate
#basePathOverride:
# PodNodesSelector
# Override podnodeselector handler path. Default to pod-nodes-selector
#podNodesSelectorPathOverride:
# Confiruation for podnodesselector. The namespace and labels are set here following the format:
# namespace: key=label,key=label; namespace2: key=label
#podNodesSelectorPathOverride:
# Confiruation for podnodesselector. The namespace and labels are set here following the format:
# echoserver: deploymenttype=blue
# Note: Multiple namespaces seperate by ;
#
# Examples:
# devel: node-role.kubernetes.io/development=true, beta.kubernetes.io/instance-type=t3.large
podNodesSelectorConfig:
echoserver: deploymentType=blue
service:
# the service is important. It forms part of the CN for SSL certificate.
name: admission-webhook
#type:
annotations: {}
replicas: 1
strategy:
type: RollingUpdate
image: liangrog/admission-webhook-server
imageTag: latest
imagePullPolicy: Always
http: TLS handshake error from 172.29.120.183:46270: remote error: tls: bad certificate
A declarative, efficient, and flexible JavaScript library for building user interfaces.
๐ Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
The Web framework for perfectionists with deadlines.
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. ๐๐๐
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
We are working to build community through open source technology. NB: members must have two-factor auth.
Open source projects and samples from Microsoft.
Google โค๏ธ Open Source for everyone.
Alibaba Open Source for everyone
Data-Driven Documents codes.
China tencent open source team.