Lab
A Cloud Guru

Create a Mutating Admission Controller Webhook with Terraform

In this lab, you will create and deploy a mutating webhook, along with its configuration. First, you will create the webhook Docker image from the provided code. Then, you will update the webhook deployment Terraform code with the image and deploy the mutating webhook. Next, you will apply the webhook registration code to finish up the deployment. Finally, you will create a couple of test Pods to confirm your mutating webhook is working as expected.

Try for free Contact sales

Path Info

Level

Intermediate

Duration

1h 15m

Published

Apr 20, 2023

Challenge

Lab Setup
1. Move to the mutating-admission-webhook directory.
2. Create an access key in the AWS Management Console. (You need to copy the Access key and Secret access key and keep them somewhere safe and accessible for the next step).
3. Make the lab-setup.sh script executable.
4. Run the lab-setup.sh script. (Note: This script will run for about 10–15 minutes.)
Challenge

Create the Webhook Docker Image
Note: Make sure you have set up your Docker Hub account before doing this objective.
1. Move into the mutating-webhook directory.
2. Log in to Docker Hub from the command line.
3. Update the Makefile with your Docker Hub username.
4. Build the mutating webhook. (Note: This can take between 5–10 minutes.)
5. Build the Docker image.
6. Push the Docker image to Docker Hub.
7. Deploy the required certificates.
Challenge

Deploy the Mutating Webhook Configuration and Webhook
1. Update the deployment configuration with your Docker Hub username.
2. Initialize the working directory.
3. Apply the configuration.
Challenge

Test the Mutating Admission Webhook
1. Create a directory called test-pods.
2. Move into to test-pods directory.
3. Use the sample Terraform code to create two test Pods called test-app-1 and test-app-2, and add a label called hello = "universe" to test-app-2.
4. Initialize your working directory.
5. Apply the webhook configuration.
6. Confirm that your mutating webhook is working:
  - test-app-1 should have a hello=world label, even though one was not provided in the configuration.
  - test-app-2 should have a hello=universe label, as you defined in the configuration.

Author

A Cloud Guru

The Cloud Content team comprises subject matter experts hyper focused on services offered by the leading cloud vendors (AWS, GCP, and Azure), as well as cloud-related technologies such as Linux and DevOps. The team is thrilled to share their knowledge to help you build modern tech solutions from the ground up, secure and optimize your environments, and so much more!

What's a lab?

Hands-on Labs are real environments created by industry experts to help you learn. These environments help you gain knowledge and experience, practice without compromising your system, test without risk, destroy without fear, and let you learn from your mistakes. Hands-on Labs: practice your skills before delivering in the real world.