An admission controller to check resources as defined by the Network Plumbing Working Group de-facto CRD specification upon their creation.
This admission controller is aware of some of the aspects of what's required when you create NetworkAttachmentDefinition
custom resources, and can report back to the user that those resources are well formatted, to improve their experience.
Clone this repository and execute ./hack/webhook-deployment.sh
to deploy:
$ ./hack/webhook-deployment.sh
If you're to create a NetworkAttachmentDefinition
which has something that's out of whack -- in this example malformatted JSON -- you'll get some feedback that something is wrong.
$ cat <<EOF | kubectl create -f -
apiVersion: "k8s.cni.cncf.io/v1"
kind: NetworkAttachmentDefinition
metadata:
name: bad-conf
spec:
config: '{
"cniVersion": "0.3.0"malFormattedJSON
}
}'
EOF
Error from server: error when creating "STDIN": admission webhook "net-attach-def-admission-controller-validating-config.k8s.cni.cncf.io" denied the request: invalid config: error parsing configuration: invalid character 'm' after object key:value pair
If you create a valid NetworkAttachmentDefinition
, you'll find that the custom resource is created successfully.
$ cat <<EOF | kubectl create -f -
apiVersion: "k8s.cni.cncf.io/v1"
kind: NetworkAttachmentDefinition
metadata:
name: macvlan-conf
spec:
config: '{
"cniVersion": "0.3.0",
"type": "macvlan",
"master": "eth0",
"mode": "bridge",
"ipam": {
"type": "host-local",
"subnet": "192.168.1.0/24",
"rangeStart": "192.168.1.200",
"rangeEnd": "192.168.1.216",
"routes": [
{ "dst": "0.0.0.0/0" }
],
"gateway": "192.168.1.1"
}
}'
EOF
networkattachmentdefinition.k8s.cni.cncf.io/macvlan-conf created
To build the admission controller, ensure it exists in your go path (we recommend you clone it to $GOPATH/src/github.com/K8sNetworkPlumbingWG/net-attach-def-admission-controller
).
While in that directory, simple run:
make
For full installation and troubleshooting steps please see Installation guide.
For developer information, refer to the developer guide.