Rancher Webhook
Rancher webhook is both a validating admission webhook and mutating admission webhook for Kubernetes.
Explanation of Webhooks in Kubernetes
Building
make
Running
./bin/webhook
Development
To direct traffic to a locally running instance ngrok can be used:
ngrok http https://localhost:9443
Update the WebhookClientConfig by adding a URL and removing the Service and CABundle fields. Update the URL with the ngrok url https://<myngrok>.ngrok.io/v1/webhook/validation
url := "https://<myngrok>.ngrok.io/v1/webhook/validation"
{
Name: "rancherauth.cattle.io",
ClientConfig: v1.WebhookClientConfig{
URL: &url,
},
....
}
The webhook will update the ValidatingWebhookConfiguration in Kubernetes to then point at the locally running instance.
License
Copyright (c) 2019-2021 Rancher Labs, Inc.
Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at
http://www.apache.org/licenses/LICENSE-2.0
Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.