Timestamped TOC 👇🏼 1:00 Intro to talk, and scope 1:30 context to admission controllers - understand the k8s API request flow 5:10 common functions performed by admission controllers 6:22 API request flow, including mutating and validating webhooks 7:41 usecases for mutating and validating webhooks 9:25 sample usecase for a webhook - outline 10:39 structure of a validation admission webhook's YAML 12:33 k8s API's Admission Review Request object 13:21 Webhook allow or fail response structure 15:17 debugging 17:05 Demo webhook success and fail responses for the sample usecase 18:35 Go code debugging in VSCode 23:03 Open Policy Agent as an alternative to Admission Webhooks for policy enforcement
Got a good high level and some detail view but given the complexity of the custom hooks, more pictures and detailed flows would always help than words. Thanks for presenting such a non-trivial topic.
"mutating webhooks are called serially, one after the other" - So in case of multiple mutating webhooks is there some logic behind order in which they will be get called?
Timestamped TOC 👇🏼
1:00 Intro to talk, and scope
1:30 context to admission controllers - understand the k8s API request flow
5:10 common functions performed by admission controllers
6:22 API request flow, including mutating and validating webhooks
7:41 usecases for mutating and validating webhooks
9:25 sample usecase for a webhook - outline
10:39 structure of a validation admission webhook's YAML
12:33 k8s API's Admission Review Request object
13:21 Webhook allow or fail response structure
15:17 debugging
17:05 Demo webhook success and fail responses for the sample usecase
18:35 Go code debugging in VSCode
23:03 Open Policy Agent as an alternative to Admission Webhooks for policy enforcement
Got a good high level and some detail view but given the complexity of the custom hooks, more pictures and detailed flows would always help than words. Thanks for presenting such a non-trivial topic.
This was really helpful and very concise!
"mutating webhooks are called serially, one after the other" - So in case of multiple mutating webhooks is there some logic behind order in which they will be get called?
Hi @CNCF wanted to check why the video was moved from its original link of ruclips.net/video/bMmYwvtYIZc/видео.html ?
Thanks a lot this was useful and the way you explained was appreciable :)