cloud-injector

Build go manually (optional)

CGO_ENABLED=0 GOOS=linux go build -a -v -o build/pod-injector cmd/main.go cmd/config.go

Run locally (for test)

go run cmd/main.go cmd/config.go -v=2 --cert-file=test/server.cer --key-file=test/server.key --config-file=test/injection.yaml
go run cmd/main.go cmd/config.go -v=2 --cert-file=test/server.cer --key-file=test/server.key --patch-file=test/patch.json

Build docker

docker build -t jianshao/pod-injector:0.1.4 .
docker push jianshao/pod-injector:0.1.4

docker build -t jianshao/demo-app:0.1.3 demo/original/
docker push jianshao/demo-app:0.1.3
docker build -t jianshao/demo-modifier:0.1.3 demo/modifier/
docker push jianshao/demo-modifier:0.1.3

Run with docker

docker run -d --name pod-injector --rm -v $PWD/test:/certs -v $PWD/test:/config -p 8443:8443 jianshao/pod-injector:0.1.4 pod-injector -v=2

Verify locally

curl -s --cacert test/ca.cer -H"Content-Type: application/json" https://localhost:8443/inject -d@test/request.json|jq
curl -s --cacert test/ca.cer -H"Content-Type: application/json" https://localhost:8443/inject -d@test/request.json|jq -r '.response.patch'|base64 -d|jq

Create webhook

kubectl create ns injector
kubectl apply -f manifests/injector-certs.yaml
kubectl apply -f manifests/injection-config-example.yaml
kubectl apply -f manifests/injector-deploy.yaml
kubectl apply -f manifests/injector-webhook.yaml

Demo pod injection

kubectl create ns bar
kubectl label ns bar injection=enabled
kubectl -n bar apply -f demo/demo-file.yaml
kubectl -n bar apply -f demo/demo-deploy.yaml