openssl req -x509 -newkey rsa:2048 -keyout tls.key -out tls.crt \
-subj "/CN=admission.webhook.svc" -nodes -sha256 -days 365

openssl req -x509 -newkey rsa:2048 -keyout tls.key -out tls.crt \
  -sha256 -days 365 -nodes -subj "/CN=admission.webhook.svc" \
  -extensions san -config <(printf "[req]\ndistinguished_name=req\n[ san ]\nsubjectAltName=DNS:admission.webhook.svc")


base64 -w0 tls.crt

minikube start --memory 4096 --cpus 2  --ports 5000:5000
minikube addons enable registry

minikube image build -t localhost:5000/admission .
minikube image push localhost:5000/admission:latest

kubectl -n webhook rollout restart deployment admission

docker build -t ttl.sh/admission .
docker push ttl.sh/admission

docker build -t localhost:5000/admission .
docker push localhost:5000/admission


kubectl apply -f k8s
kubectl -n webhook get pods -w

kubectl -n controlled delete pods --all
kubectl apply -f k8s
kubectl -n controlled get pods --show-labels


kubectl delete validatingwebhookconfigurations.admissionregistration.k8s.io sample
kubectl delete mutatingwebhookconfigurations.admissionregistration.k8s.io sample