https://github.com/yankeguo-deprecated/template-autoops-admission

https://github.com/yankeguo-deprecated/template-autoops-admission

Last synced: about 2 months ago
JSON representation

• Host: GitHub
• URL: https://github.com/yankeguo-deprecated/template-autoops-admission
• Owner: yankeguo-deprecated
• License: mit
• Created: 2021-07-02T02:52:27.000Z (almost 4 years ago)
• Default Branch: master
• Last Pushed: 2021-07-05T07:12:35.000Z (almost 4 years ago)
• Last Synced: 2025-02-14T16:58:24.375Z (3 months ago)
• Language: Go
• Size: 3.3 MB
• Stars: 0
• Watchers: 1
• Forks: 0
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

README

        
# template-autoops-admission

## 使用方式

* 初始化 `admission-bootstrapper`

  参照此文档 https://github.com/k8s-autoops/admission-bootstrapper ，完成 `admission-bootstrapper` 的初始化步骤

* 部署以下 YAML

```yaml

# create serviceaccount

apiVersion: v1

kind: ServiceAccount

metadata:

  name: template-autoops-admission

  namespace: autoops

---

# create clusterrole

apiVersion: rbac.authorization.k8s.io/v1beta1

kind: ClusterRole

metadata:

  name: template-autoops-admission

rules:

  - apiGroups: [ "" ]

    resources: [ "namespaces" ]

    verbs: [ "get" ]

---

# create clusterrolebinding

apiVersion: rbac.authorization.k8s.io/v1beta1

kind: ClusterRoleBinding

metadata:

  name: template-autoops-admission

roleRef:

  apiGroup: rbac.authorization.k8s.io

  kind: ClusterRole

  name: template-autoops-admission

subjects:

  - kind: ServiceAccount

    name: template-autoops-admission

    namespace: autoops

---

# create job

apiVersion: batch/v1

kind: Job

metadata:

  name: install-template-autoops-admission

  namespace: autoops

spec:

  template:

    spec:

      serviceAccount: admission-bootstrapper

      containers:

        - name: admission-bootstrapper

          image: autoops/admission-bootstrapper

          env:

            - name: ADMISSION_NAME

              value: template-autoops-admission

            - name: ADMISSION_IMAGE

              value: autoops/template-autoops-admission

            - name: ADMISSION_ENVS

              value: ""

            - name: ADMISSION_SERVICE_ACCOUNT

              value: "template-autoops-admission"

            - name: ADMISSION_MUTATING

              value: "true"

            - name: ADMISSION_IGNORE_FAILURE

              value: "false"

            - name: ADMISSION_SIDE_EFFECT

              value: "None"

            - name: ADMISSION_RULES

              value: '[{"operations":["CREATE"],"apiGroups":[""], "apiVersions":["*"], "resources":["services"]}]'

      restartPolicy: OnFailure

```

## Credits

Guo Y.K., MIT License