Validate Kubernetes Object Creation

Question

I would like to implement functionality (or even better reuse existing libraries/APIs!) that would intercept a kubectl command to create an object and perform some pre-creation validation tasks on it before allowing kubectl command to proceed.

e.g. check various values in the yaml against external DB for example check a label conforms to the internal naming convention and so on..

Is there an accepted pattern or existing tools etc? Any guidance appreciated

Janos Lenart · Accepted Answer · 2019-03-22 00:12:50Z

2

The way to do this is by creating a ValidatingAdmissionWebhook. It's not for the faint of heart and even a brief example would be an overkill as a SO answer. A few pointers to start:

https://kubernetes.io/docs/reference/access-authn-authz/admission-controllers/#validatingadmissionwebhook

https://banzaicloud.com/blog/k8s-admission-webhooks/

https://container-solutions.com/a-gentle-intro-to-validation-admission-webhooks-in-kubernetes/

I hope this helps :-)

answered Mar 22, 2019 at 0:12

Janos Lenart

27.4k5 gold badges80 silver badges77 bronze badges

Sign up to request clarification or add additional context in comments.

Comments

P Ekambaram · Accepted Answer · 2019-03-22 08:22:56Z

0

I usually append - - dry-run to kubectl command to check and validate the YAML config

answered Mar 22, 2019 at 8:22

P Ekambaram

17.9k9 gold badges46 silver badges69 bronze badges

Collectives™ on Stack Overflow

Validate Kubernetes Object Creation

2 Answers 2

Comments

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Related