https://github.com/moolen/187
It's about coming up and staying on top
https://github.com/moolen/187
Last synced: 12 months ago
JSON representation
It's about coming up and staying on top
- Host: GitHub
- URL: https://github.com/moolen/187
- Owner: moolen
- Created: 2019-06-25T14:51:16.000Z (almost 7 years ago)
- Default Branch: master
- Last Pushed: 2019-08-28T12:01:29.000Z (almost 7 years ago)
- Last Synced: 2024-04-14T19:12:54.700Z (about 2 years ago)
- Language: Go
- Homepage:
- Size: 23.4 KB
- Stars: 1
- Watchers: 1
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
Awesome Lists containing this project
README
# 187: exec into pod = death sentence
This is a admission webhook that kills a pod after spawning a shell using `kubectl exec`.
Why? Developers want to debug but we should reconcile the state of the pod.
See [./deploy](./deploy) for deployment manifests. TLS is mandatory for webhooks. The example uses `cert-manager` to generate and inject the TLS credentials into the webhook and the pod. The image is available via `moolen/187:latest`.
| env | default | description |
|--|--|--|
| `GRACE_PERIOD` | 15m | specify a grace period before killing the pod |
| `LOG_LEVEL` | info | set the log level|
| `TLS_CERT` | `` | path to the server certificate file |
| `TLS_KEY` | `` | path to the private key |
| `LISTEN` | `:8000` | port/address to listen on. It's always TLS |