- Lab
- A Cloud Guru
Preparing Kubernetes for Dynamic Admission Controllers
Admission controllers vet Kubernetes objects before running and can be a powerful part of a Kubernetes cluster. However, not all Kubernetes installs are set up to use admission controllers out of the box. In this lab, we'll check to see if the provided Kubernetes setup can use the provided admission controller and then set up our Kubernetes server to use the desired controller.
Path Info
Table of Contents
-
Challenge
Attempt to Run Fail State
Run the provided
bad-pod.yml
file to see if the admission controller stops its creation.Remove the Pod if it fails.
-
Challenge
Check Setup
Check to see if the admission registration's API is enabled. Also, check for enabled admission controllers.
-
Challenge
Enable Controller
Enable the
ImagePolicyWebhook
controller on thekube-apiserver
. -
Challenge
Test Setup
Check that the admission controller runs as intended.
NOTE:
kube-apiserver
may take several moments to restart.
What's a lab?
Hands-on Labs are real environments created by industry experts to help you learn. These environments help you gain knowledge and experience, practice without compromising your system, test without risk, destroy without fear, and let you learn from your mistakes. Hands-on Labs: practice your skills before delivering in the real world.
Provided environment for hands-on practice
We will provide the credentials and environment necessary for you to practice right within your browser.
Guided walkthrough
Follow along with the author’s guided walkthrough and build something new in your provided environment!
Did you know?
On average, you retain 75% more of your learning if you get time for practice.