Create a Mutating Admission Controller Webhook with Terraform

You will first need to set up the lab, which involves the deployment of an EKS cluster. First, you will build the mutating webhook from the supplied code that is written in Go. Once the Docker image has been built, you will need to push your image to Docker Hub. (Note: If you don't already have one, you will need to create a free Docker Hub account before you start the lab.) You will then update the supplied Terraform configuration with your image and apply the Terraform code to deploy your mutating webhook. You will finish up the lab by creating two test Pods: test-app-1 without a label and test-app-2 with the label hello = "universe". If all goes well, your webhook should add a label to test-app-1 and honor the label set in test-app-2.

Lab Resources

• Docker Hub
• Terraform Kubernetes Mutating Webhook documentation
• GitHub Repo for the Lab

Test Pods Code

Use the following code to help you create the test Pods, modifying it as needed to create test-app-1 and test-app-2 as described above:

terraform {
  required_providers {
    kubernetes = {
      source = "hashicorp/kubernetes"
    }
  }
}

provider "kubernetes" {
  config_path = "~/.kube/config"
}

resource "kubernetes_pod" "test_app" {
  metadata {
    name = "test-app"
  }

  spec {
    container {
      name    = "test-app
      image   = "ubuntu:focal"
      command = ["/bin/bash"]
      args    = ["-c", "sleep infinity"]
    }
  }
}