internallb-webhook-admission-controller

KO | EN

gitlite — search

#python #java #python3 #arduino #golang #machine-learning #rust #html #flask #javascript #seismology #nodejs

internallb-webhook-admission-controller

★ 29 Open GitHub ↗

Kubernetes Internal LoadBalancer Admission Webhook

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

# Kubernetes Internal LoadBalancer Admission Webhook

[![Go Report Card](https://goreportcard.com/badge/lachie83/internallb-webhook-admission-controller)](https://goreportcard.com/report/lachie83/internallb-webhook-admission-controller) [![License](https://img.shields.io/badge/License-Apache%202.0-blue.svg)](https://github.com/lachie83/internallb-webhook-admission-controller/blob/master/LICENSE)

This Kubernetes Admission controller only admits the creation of v1/service resources containing the correct cloud provider annotations to create Internal LoadBalancers.

See [upstream k8s docs](https://kubernetes.io/docs/concepts/services-networking/service/#internal-load-balancer) for details on these annotations

### CircleCI Build Status
[![CircleCI](https://circleci.com/gh/lachie83/internallb-webhook-admission-controller.svg?style=svg)](https://circleci.com/gh/lachie83/internallb-webhook-admission-controller)

## Project State

Experimental

## Attribution

This projects uses the upstream examples found in the following repos:
* https://github.com/caesarxuchao/example-webhook-admission-controller
* https://github.com/kubernetes/kubernetes/tree/release-1.9/test/images/webhook

Massive thanks for all the work that went into crafting reusable examples.

## Usage

[![Usage Demo](https://img.youtube.com/vi/SYf-cbmA6WI/0.jpg)](https://youtu.be/SYf-cbmA6WI "Usage Demo")

## Supported Kubernetes versions

* 1.9
* 1.10

## Supported Clouds

* Supports any cloud provider that provisions an internal LoadBalancer based on Kubernetes service annotation. See upstream [docs](https://kubernetes.io/docs/concepts/services-networking/service/#internal-load-balancer).
* Cloud support include:
  * Azure
  * Google Cloud
  * AWS

## Prerequisites
Please enable the admission webhook feature
[doc](https://kubernetes.io/docs/admin/extensible-admission-controllers/#enable-external-admission-webhooks).

## Build

```bash
make docker_build
```

## Deploy

There are two types of Webhook Admission controllers in Kubernetes 1.9.
* ValidatingAdmissionWebhook
* MutatingAdmissionWebhook

Enable the relevant Kubernetes Admission controller by adding to following `--admission-control` and restarting kube-apiserver. See the relevant [docs](https://kubernetes.io/docs/admin/extensible-admission-controllers/#external-admission-webhooks).
```
ValidatingAdmissionWebhook,MutatingAdmissionWebhook
```

Here is an example minikube command to build a cluster with the Admission Controller flags already present on the API server.
```
minikube start --kubernetes-version v1.9.3 --bootstrapper kubeadm --logtostderr --vm-driver=virtualbox --extra-config=apiserver.admission-control="NamespaceLifecycle,LimitRanger,ServiceAccount,DefaultStorageClass,ResourceQuota,ValidatingAdmissionWebhook,MutatingAdmissionWebhook,PodPreset"
```

Once the cluster has been configured you can deploy the admission webhook to using Helm. The default installation configures a `MutatingWebhookConfiguration`.

```
helm install --name admission-webhook charts/internallb-webhook-admission-controller
```

To install a `ValidatingWebhookConfiguration` please use the following command

```
helm install --name admission-webhook charts/internallb-webhook-admission-controller --set admissionRegistration.kind=ValidatingWebhookConfiguration
```

For a full list of configurable values in the helm chart please, run the following command

```
helm inspect charts/internallb-webhook-admission-controller
```

internallb-webhook-admission-controller

Explore Similar Repositories

Was this content helpful?

Recent Feedback

Download README