https://github.com/vsliouniaev/k8s-crdguard

Block deletion of CRDs if there are still some of the resources in the cluster
https://github.com/vsliouniaev/k8s-crdguard

admission-webhook crd crds go golang helm k8s kubernetes

Last synced: 7 months ago
JSON representation

Block deletion of CRDs if there are still some of the resources in the cluster

• Host: GitHub
• URL: https://github.com/vsliouniaev/k8s-crdguard
• Owner: vsliouniaev
• License: apache-2.0
• Created: 2020-04-27T21:26:20.000Z (over 5 years ago)
• Default Branch: master
• Last Pushed: 2020-04-29T09:07:30.000Z (over 5 years ago)
• Last Synced: 2024-06-20T14:30:20.213Z (over 1 year ago)
• Topics: admission-webhook, crd, crds, go, golang, helm, k8s, kubernetes
• Language: Go
• Homepage:
• Size: 3.37 MB
• Stars: 7
• Watchers: 2
• Forks: 1
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

README

          
[![Go Report Card](https://goreportcard.com/badge/github.com/vsliouniaev/k8s-crdguard)](https://goreportcard.com/report/github.com/vsliouniaev/k8s-crdguard)

[![GitHub release (latest SemVer)](https://img.shields.io/github/v/release/vsliouniaev/k8s-crdguard?sort=semver)](https://github.com/vsliouniaev/k8s-crdguard/releases/latest)

[![Docker Pulls](https://img.shields.io/docker/pulls/vsliouniaev/k8s-crdguard?color=blue)](https://hub.docker.com/r/vsliouniaev/k8s-crdguard/tags)

# k8s-crdguard

![](static/images/example-usage.png)

Uses [jet/kube-webhook-certgen](https://github.com/jet/kube-webhook-certgen) in the provided chart 

to simplify provisioning certificates for `validatingwebhookconfigurations`.

```sh

Usage of k8s-crdguard:

  -cert-file string

    	Path to certificate file to serve TLS. (default "/cert/cert")

  -crds value

    	List of crds to block deletion of. Default will block all CRDs. (example "prometheuses.monitoring.coreos.com")

  -key-file string

    	Path to key file to serve TLS. (default "/cert/key")

  -kubeconfig string

    	Path to kubeconfig file: e.g. ~/.kube/kind-config-kind. (default uses in-cluster config)

  -log-debug

    	Whether to enable debug log configuration. (default false)

```