ApiServer with Webhook Authorizer

14 views
Skip to first unread message

krma...@gmail.com

unread,
Feb 16, 2017, 10:28:14 PM2/16/17
to Kubernetes developer/contributor discussion
Hi All
Is there a way to control in the apiserver, which requests should go to the webhook and which shouldnt  when the apiserver is running with the webhook option. I want certain type of requests to work without the webhook or another way to think about this is , i want to deploy the webhook using kubernetes :-)

-Mayank

Jordan Liggitt

unread,
Feb 16, 2017, 10:43:12 PM2/16/17
to krma...@gmail.com, Kubernetes developer/contributor discussion
No, the authorization chain is uniform for all API calls. You can have multiple authorizers, so you could have a core ABAC or RBAC policy in place to allow the control plane to keep functioning even if your webhook was not running. 
--
You received this message because you are subscribed to the Google Groups "Kubernetes developer/contributor discussion" group.
To unsubscribe from this group and stop receiving emails from it, send an email to kubernetes-de...@googlegroups.com.
To post to this group, send email to kuberne...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/kubernetes-dev/c9561ec1-d4cb-48f1-8576-06c24cc7dc76%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Brian Grant

unread,
Feb 16, 2017, 10:46:30 PM2/16/17
to krma...@gmail.com, kubernet...@googlegroups.com
moved to kubernetes-users

--
You received this message because you are subscribed to the Google Groups "Kubernetes developer/contributor discussion" group.
To unsubscribe from this group and stop receiving emails from it, send an email to kubernetes-dev+unsubscribe@googlegroups.com.
To post to this group, send email to kubernetes-dev@googlegroups.com.
Reply all
Reply to author
Forward
This conversation is locked
You cannot reply and perform actions on locked conversations.
0 new messages