{"id":28741011,"url":"https://github.com/aliyuncontainerservice/kubernetes-webhook-injector","last_synced_at":"2025-07-29T10:09:14.810Z","repository":{"id":75042519,"uuid":"551389848","full_name":"AliyunContainerService/kubernetes-webhook-injector","owner":"AliyunContainerService","description":null,"archived":false,"fork":false,"pushed_at":"2023-09-05T03:57:24.000Z","size":4437,"stargazers_count":6,"open_issues_count":0,"forks_count":2,"subscribers_count":7,"default_branch":"master","last_synced_at":"2025-06-23T09:49:05.574Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/AliyunContainerService.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null}},"created_at":"2022-10-14T10:02:55.000Z","updated_at":"2024-09-14T06:29:53.000Z","dependencies_parsed_at":"2025-06-16T07:09:57.146Z","dependency_job_id":"f2327f72-021a-4a99-abf8-a40a4dc723b0","html_url":"https://github.com/AliyunContainerService/kubernetes-webhook-injector","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/AliyunContainerService/kubernetes-webhook-injector","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/AliyunContainerService%2Fkubernetes-webhook-injector","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/AliyunContainerService%2Fkubernetes-webhook-injector/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/AliyunContainerService%2Fkubernetes-webhook-injector/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/AliyunContainerService%2Fkubernetes-webhook-injector/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/AliyunContainerService","download_url":"https://codeload.github.com/AliyunContainerService/kubernetes-webhook-injector/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/AliyunContainerService%2Fkubernetes-webhook-injector/sbom","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":267668690,"owners_count":24124966,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-07-29T02:00:12.549Z","response_time":2574,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2025-06-16T07:09:52.044Z","updated_at":"2025-07-29T10:09:14.797Z","avatar_url":"https://github.com/AliyunContainerService.png","language":"Go","funding_links":[],"categories":[],"sub_categories":[],"readme":"## Introduction\nIn cloud scenarios with  relatively high permission requirements, the IP address of Pod needs to be dynamically added to or removed from the specified Alibaba cloud product whitelist to achieve the most fine-grained control over permissions. You can use ack-kubernetes-webhook-injector to dynamically add or remove Pod IP from the whitelist by annotating the Pod.\n\nack-kubernetes-webhook-injector is a kubernetes component that can dynamically add or remove Pod IP from multiple Alibaba cloud product whitelists, eliminating the need to manually configure Pod IP to the cloud product whitelist. \n\nCurrently ack-kubernetes-webhook-injector supports the following functions:\n\n* When creating/deleting a Pod, automatically add/remove the Pod's IP from the specified RDS whitelist .\n* When creating/deleting a Pod, automatically add/remove the Pod's IP from the specified REDIS whitelist.\n* When creating/deleting a Pod, automatically add/remove the Pod's IP from the specified SLB access control list.\n\n## Quick Start\n### Build and Deploy\n1. Build the project\n```\n# make\n```\n2. Deploy the project\n```\n# make docker-build\n```\n### Uninstall\nIf you no longer need the ack-kubernetes-webhook-injector, please execute the following command to clear the configuration information while deleting it:\n```\n# kubectl -n kube-system delete secret kubernetes-webhook-injector-certs\n# kubectl delete mutatingwebhookconfigurations.admissionregistration.k8s.io kubernetes-webhook-injector\n```\n## Configuration and Use\nYou only need to use Annotation in the Pod Spec of the Pod replica controller to indicate the RDS instance ID and the RDS whitelist grouping name. When a Pod is created, ack-kubernetes-webhook-injector adds the IP address of the Pod to a whitelist or security group rule and removes the rule when the Pod is deleted.\nPod's Annotation needs to include:\n* RDS Whitelist:\n  - RDS Instance ID: `ack.aliyun.com/rds_id`\n  - RDS Whitelist Group Name: `ack.aliyun.com/white_list_name`\n* SLB Access Control: `ack.aliyun.com/access_control_policy_id`\n* Redis Whitelist:\n  - Redis Instance ID: `ack.aliyun.com/redis_id`\n  - Redis White List Grouping: `ack.aliyun.com/redis_white_list_name`\n\nFor more information, see [Configure the Alibaba cloud product whitelist dynamically for Pod](https://help.aliyun.com/document_detail/188574.html).\n## License\nCopyright 2022.\n\nLicensed under the Apache License, Version 2.0 (the \"License\"); you may not use this file except in compliance with the License. You may obtain a copy of the License at\n``\nhttp://www.apache.org/licenses/LICENSE-2.0\n``\n.\n\nUnless required by applicable law or agreed to in writing, software distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License.\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Faliyuncontainerservice%2Fkubernetes-webhook-injector","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Faliyuncontainerservice%2Fkubernetes-webhook-injector","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Faliyuncontainerservice%2Fkubernetes-webhook-injector/lists"}