Update: In the latest source code repository, I replaced the webhook server certificate created by the CertificateSigningRequest API and CA…

A “magic” way to inject a file into pod containers

Hey! Who deployed this container in our shared Kubernetes cluster without putting resource limits on it? Why don’t we have…

Kubernetes webhook development (validating admission webhook) tutorial using kubewebhook - slok/pod-exec-guard-kubewebhook-tutorial

Kubernetes Admission Controllers concept is very popular these days, especially dynamic ones:  MutatingAdmissionWebhook and…

As mentioned in the previous blog,
Istio leverage the MutatingAdmissionWebhook
to implement automatic sidecar injection. In this article, we will introduce how the automatic
injection works through...

Recently, I am leading a project to re-design our on-premise data centers using Kubernetes. Inevitably there are opportunities to develop Kubernetes native appl…