Skip to content
This repository has been archived by the owner on Jul 26, 2022. It is now read-only.

Admission webhook server #79

Closed
3 tasks
silasbw opened this issue Jun 2, 2019 · 2 comments
Closed
3 tasks

Admission webhook server #79

silasbw opened this issue Jun 2, 2019 · 2 comments
Labels
core General to KES and not backend specific Stale

Comments

@silasbw
Copy link
Contributor

silasbw commented Jun 2, 2019

Create an admission webhook server for kubernetes-external-secrets. This is part of the effort to avoid putting Secrets in ETCD.

With an admission webhook server we can use mutating admission webhooks to interpose on Pod creation and inject external secret data by adding an init container to Pods.

This issue tracks work to get a basic mutating admission webhook server running:

  • interposes on requests to create new Pods
  • identifies Pods with a .metadata.annotations['externalsecrets.kubernetes-client.io'] annotation (value can be anything, see Volume front end API discussion).
  • adds an init container that echos 'hello world'
@Flydiverny Flydiverny added the core General to KES and not backend specific label Jan 21, 2021
@github-actions
Copy link

This issue is stale because it has been open 90 days with no activity. Remove stale label or comment or this will be closed in 30 days.

@github-actions github-actions bot added the Stale label Apr 22, 2021
@github-actions
Copy link

This issue was closed because it has been stalled for 30 days with no activity.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
core General to KES and not backend specific Stale
Projects
None yet
Development

No branches or pull requests

2 participants