Creating and Debugging Kubernetes Admission Webhooks
summary
Covers Kubernetes Admission webhooks (validating and mutating): explains where they fit in the API request flow, common use cases, and how to build a custom admission webhook. Reviews development challenges and demonstrates a method for live debugging a webhook deployed to a Kubernetes cluster (including breakpoints/step-throughs). Also provides a brief overview of Open Policy Agent and the Gatekeeper project in relation to admission control.
AI-written summary · about
chapters (5)
- 0:00Start
- 9:28Use Case Black Deletions Based on Label
- 10:36Kes Resources for Custom Webhook
- 14:18Block Deletions Based on Label and Namespace
- 15:08Debug?
related talks
35mAdmission Webhooks: Configuration and Debugging Best Practices
20mUsing, and mis-using K8s Dynamic Admission Control
35mEnforcing Bespoke Policies in Kubernetes [I]
05mKubernetes API Explained
01h 23mTutorial: How to Build a K8s Admission Controller fro...
29mEVAPorating Kubernetes Security Risk: Adopting Validating Admission Policy at Scale
20mMaking Dynamic Admission Control Even More Dynamic Using...
01h 01mKubernetes – going beyond the basics