github/container.training
1
0
Fork 0
mirror of https://github.com/jpetazzo/container.training.git synced 2026-07-28 01:01:12 +00:00
Code Issues Packages Projects Releases Wiki Activity

📝 Update admission control use cases

Browse Source 
Thanks to Marcus Noble talk at Rejekts Paris 2024 💯
This commit is contained in:
Jérôme Petazzoni
2024-03-24 15:41:22 +01:00
parent 41330f8302
commit a5e270b756
1 changed files with 9 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files

16
slides/k8s/admission.md
View File

@@ -20,19 +20,21 @@
## Use cases
Some examples ...
- Defaulting
- Stand-alone admission controllers
*injecting image pull secrets, sidecars, environment variables...*
*validating:* policy enforcement (e.g. quotas, naming conventions ...)
- Policy enforcement and best practices
*mutating:* inject or provide default values (e.g. pod presets)
*prevent: `latest` images, deprecated APIs...*
- Admission controllers part of a greater system
*require: PDBs, resource requests/limits, labels/annotations, local registry...*
*validating:* advanced typing for operators
- Problem mitigation
*mutating:* inject sidecars for service meshes
*block nodes with vulnerable kernels, inject log4j mitigations...*
- Extended validation for operators
---