Admission controllers vet Kubernetes objects before running and can be a powerful part of a Kubernetes cluster. However, not all Kubernetes installs are set up to use admission controllers out of the box. In this lab, we’ll check to see if the provided Kubernetes setup can use the provided admission controller and then set up our Kubernetes server to use the desired controller.
Learning Objectives
Successfully complete this lab by achieving the following learning objectives:
- Attempt to Run Fail State
Run the provided
bad-pod.ymlfile to see if the admission controller stops its creation.Remove the Pod if it fails.
- Check Setup
Check to see if the admission registration’s API is enabled. Also, check for enabled admission controllers.
- Enable Controller
Enable the
ImagePolicyWebhookcontroller on thekube-apiserver.- Test Setup
Check that the admission controller runs as intended.
NOTE:
kube-apiservermay take several moments to restart.
