Mutating Webhook example

Setup the webhook

kubectl apply -f webhook.yaml

Set up the CA Certificate

Once the webhook runs (give it a few seconds to initialize), the CA certificate can be downloaded by executing a curl command within the container. To retrieve the base64 encoded version of this ca.pem, use the following command:

kubectl exec -it -n mutatingwebhook $(kubectl get pods --no-headers -o custom-columns=":metadata.name" -n mutatingwebhook) -- wget -q -O- localhost:8080/ca.pem?base64

The output of this command should replace the base64 string in caBundle in webhook.yaml:

    caBundle: "cGxhY2Vob2xkZXIK" # <= replace this string within quotes

Then reapply the webhook using:

kubectl apply -f webhook.yaml