# Mutating Webhook example ## Setup the webhook ``` kubectl apply -f webhook.yaml ``` ## Set up the CA Certificate Once the webhook runs (give it a few seconds to initialize), the CA certificate can be downloaded by executing a curl command within the container. To retrieve the base64 encoded version of this ca.pem, use the following command: ``` kubectl exec -it -n mutatingwebhook $(kubectl get pods --no-headers -o custom-columns=":metadata.name" -n mutatingwebhook) -- wget -q -O- localhost:8080/ca.pem?base64 ``` The output of this command should replace the base64 string in caBundle in webhook.yaml: ``` caBundle: "cGxhY2Vob2xkZXIK" # <= replace this string within quotes ``` Then reapply the webhook using: ``` kubectl apply -f webhook.yaml ```