Skip to content

Latest commit

 

History

History
38 lines (30 loc) · 1.62 KB

installation.md

File metadata and controls

38 lines (30 loc) · 1.62 KB
Raw

Installation guide

Building Docker image

Go to the root directory of the Network Resources Injector and build image:

cd $GOPATH/src/github.com/k8snetworkplumbingwg/network-resources-injector
make image

Deploying webhook application

Create Service Account for network resources injector mutating admission webhook and webhook installer and apply RBAC rules to created account:

kubectl apply -f deployments/auth.yaml

Note: If you want to use third party certificate, create secret resource with following command and attach it in network-resources-injector pod spec:

kubectl create secret generic network-resources-injector-secret \
        --from-file=key.pem=<your server-key.pem> \
        --from-file=cert.pem=<your server-cert.pem> \
        -n kube-system
./scripts/webhook-deployment.sh

Next step creates Kubernetes pod. Init container creates all resources required to run webhook:

  • TLS key and certificate signed with Kubernetes CA
  • mutating webhook configuration
  • service to expose webhook deployment to the API server

After successful completion of the init container work, the actual webhook server application container is started.

Execute command:

kubectl apply -f deployments/server.yaml

Note: Verify that Kubernetes controller manager has --cluster-signing-cert-file and --cluster-signing-key-file parameters set to paths to your CA keypair to make sure that Certificates API is enabled in order to generate certificate signed by cluster CA. More details about TLS certificates management in a cluster available here.*