Test a Dynamic Admission Controller with Terraform

In this scenario, you will first need to set up the lab, which involves the deployment of an EKS cluster. You will then build and deploy the validating webhook with your Makefile. You will then create the Terraform configuration that will deploy three test pods: test-app-1, test-app-2, and test-app-3. The test-app-2 pod will have a label of hello = "world", and the test-app-3 pod will have a label of hello = "universe". Confirm that your webhook is functioning as intended.

Lab Resources

• Docker Hub
• Terraform Kubernetes Validating Webhook documentation
• Repo for the lab

Code to Use for the Test Pods

terraform {
  required_providers {
    kubernetes = {
      source = "hashicorp/kubernetes"
    }
  }
}

provider "kubernetes" {
  config_path = "~/.kube/config"
}

resource "kubernetes_pod" "test_app" {
  metadata {
    name = "test-app"
  }

  spec {
    container {
      name    = "test-app-1"
      image   = "ubuntu:focal"
      command = ["/bin/bash"]
      args    = ["-c", "sleep infinity"]
    }
  }
}