37 lines
1.1 KiB
Plaintext
37 lines
1.1 KiB
Plaintext
|
|
openssl req -x509 -newkey rsa:2048 -keyout tls.key -out tls.crt \
|
|
-subj "/CN=admission.webhook.svc" -nodes -sha256 -days 365
|
|
|
|
openssl req -x509 -newkey rsa:2048 -keyout tls.key -out tls.crt \
|
|
-sha256 -days 365 -nodes -subj "/CN=admission.webhook.svc" \
|
|
-extensions san -config <(printf "[req]\ndistinguished_name=req\n[ san ]\nsubjectAltName=DNS:admission.webhook.svc")
|
|
|
|
|
|
base64 -w0 tls.crt
|
|
|
|
minikube start --memory 4096 --cpus 2 --ports 5000:5000
|
|
minikube addons enable registry
|
|
|
|
minikube image build -t localhost:5000/admission .
|
|
minikube image push localhost:5000/admission:latest
|
|
|
|
kubectl -n webhook rollout restart deployment admission
|
|
|
|
docker build -t ttl.sh/admission .
|
|
docker push ttl.sh/admission
|
|
|
|
docker build -t localhost:5000/admission .
|
|
docker push localhost:5000/admission
|
|
|
|
|
|
kubectl apply -f k8s
|
|
kubectl -n webhook get pods -w
|
|
|
|
kubectl -n controlled delete pods --all
|
|
kubectl apply -f k8s
|
|
kubectl -n controlled get pods --show-labels
|
|
|
|
|
|
kubectl delete validatingwebhookconfigurations.admissionregistration.k8s.io sample
|
|
kubectl delete mutatingwebhookconfigurations.admissionregistration.k8s.io sample
|