Sidecar Injector

git clone https://github.com/morvencao/kube-mutating-webhook-tutorial.git cd kube-mutating-webhook-tutorial

sudo dnf install -y make sudo yum install -y go

aws ecr get-login-password --region ap-northeast-2 | docker login --username AWS --password-stdin $ACCOUNT_ID.dkr.ecr.ap-northeast-2.amazonaws.com make docker-build docker-push IMAGE=$ACCOUNT_ID.dkr.ecr.ap-northeast-2.amazonaws.com/webhook:latest

cd ~/kube-mutating-webhook-tutorial/deploy/

cat << EOF > configmap.yaml apiVersion: v1 kind: ConfigMap metadata: name: sidecar-injector labels: app: sidecar-injector data: sidecarconfig.yaml: | containers: - name: sidecar-curl image: curlimages/curl imagePullPolicy: IfNotPresent args: - --version command: - sleep - infinity EOF

cat << EOF > kustomization.yaml namespace: sidecar-injector resources: - namespace.yaml - clusterrole.yaml - clusterrolebinding.yaml - deployment.yaml - service.yaml - serviceaccount.yaml - configmap.yaml images: - name: sidecar-injector newName: $ACCOUNT_ID.dkr.ecr.ap-northeast-2.amazonaws.com/webhook newTag: latest apiVersion: kustomize.config.k8s.io/v1beta1 kind: Kustomization EOF

cd ~/kube-mutating-webhook-tutorial make deploy IMAGE=$ACCOUNT_ID.dkr.ecr.ap-northeast-2.amazonaws.com/webhook:latest

kubectl create ns skills kubectl label namespace skills sidecar-injection=enabled

kubectl get namespace -L sidecar-injection

kubectl -n skills run alpine \ --image=alpine \ --restart=Never \ --command -- sleep infinity

kubectl -n skills get pod