init

admission/commands

@@ -0,0 +1,36 @@
+
+openssl req -x509 -newkey rsa:2048 -keyout tls.key -out tls.crt \
+-subj "/CN=admission.webhook.svc" -nodes -sha256 -days 365
+
+openssl req -x509 -newkey rsa:2048 -keyout tls.key -out tls.crt \
+  -sha256 -days 365 -nodes -subj "/CN=admission.webhook.svc" \
+  -extensions san -config <(printf "[req]\ndistinguished_name=req\n[ san ]\nsubjectAltName=DNS:admission.webhook.svc")
+
+
+base64 -w0 tls.crt
+
+minikube start --memory 4096 --cpus 2  --ports 5000:5000
+minikube addons enable registry
+
+minikube image build -t localhost:5000/admission .
+minikube image push localhost:5000/admission:latest
+
+kubectl -n webhook rollout restart deployment admission
+
+docker build -t ttl.sh/admission .
+docker push ttl.sh/admission
+
+docker build -t localhost:5000/admission .
+docker push localhost:5000/admission
+
+
+kubectl apply -f k8s
+kubectl -n webhook get pods -w
+
+kubectl -n controlled delete pods --all
+kubectl apply -f k8s
+kubectl -n controlled get pods --show-labels
+
+
+kubectl delete validatingwebhookconfigurations.admissionregistration.k8s.io sample
+kubectl delete mutatingwebhookconfigurations.admissionregistration.k8s.io sample