Seeking: Dynamic Admission Controller initializer example

[Mark Petrovic]

Good day.  I can put one of these initializers to good use in my cluster, and wish to commence developing one immediately.  

https://kubernetes.io/docs/admin/extensible-admission-controllers/#initializers

Can someone point me to an example of a simple initializer, showing its interaction with the cluster master, so I can get an idea of how to code mine?

Many thanks.

[Daniel Smith]

Providing a working example / walkthrough for this is very high on our (SIG API Machinery) list, but we don't have one quite yet. We made it possible last quarter, now we need to make it easy.

--
You received this message because you are subscribed to the Google Groups "Kubernetes developer/contributor discussion" group.
To unsubscribe from this group and stop receiving emails from it, send an email to kubernetes-dev+unsubscribe@googlegroups.com.
To post to this group, send email to kubernetes-dev@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/kubernetes-dev/df1f52a8-2d7c-49e1-a656-8f32e272387e%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[Stefan Schimanski]

I have written a yet-to-be-merged CustomResourceDefinition integration test you can find here: https://github.com/kubernetes/kubernetes/pull/47252. Maybe that's helpful to get going. 

Other than that, the design proposal at https://github.com/kubernetes/community/blob/master/contributors/design-proposals/admission_control_extension.md#initializers is highly recommended to read.

Best regards,

   Stefan

--

[Clayton Coleman]

There is an initializer e2e test (but it doesn't demonstrate the initializer) here: https://github.com/kubernetes/kubernetes/blob/master/test/e2e/extension/initializers.go#L109

On Tue, Jul 11, 2017 at 4:18 PM, Stefan Schimanski <st...@redhat.com> wrote:

I have written a yet-to-be-merged CustomResourceDefinition integration test you can find here: https://github.com/kubernetes/kubernetes/pull/47252. Maybe that's helpful to get going. 

Other than that, the design proposal at https://github.com/kubernetes/community/blob/master/contributors/design-proposals/admission_control_extension.md#initializers is highly recommended to read.

Best regards,

   Stefan

On Tue, Jul 11, 2017 at 2:32 PM, Mark Petrovic <mspet...@gmail.com> wrote:

Good day.  I can put one of these initializers to good use in my cluster, and wish to commence developing one immediately.  

https://kubernetes.io/docs/admin/extensible-admission-controllers/#initializers

Can someone point me to an example of a simple initializer, showing its interaction with the cluster master, so I can get an idea of how to code mine?

Many thanks.

--
You received this message because you are subscribed to the Google Groups "Kubernetes developer/contributor discussion" group.
To unsubscribe from this group and stop receiving emails from it, send an email to kubernetes-dev+unsubscribe@googlegroups.com.

To post to this group, send email to kuberne...@googlegroups.com.

To view this discussion on the web visit https://groups.google.com/d/msgid/kubernetes-dev/df1f52a8-2d7c-49e1-a656-8f32e272387e%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

--
You received this message because you are subscribed to the Google Groups "Kubernetes developer/contributor discussion" group.
To unsubscribe from this group and stop receiving emails from it, send an email to kubernetes-dev+unsubscribe@googlegroups.com.
To post to this group, send email to kubernetes-dev@googlegroups.com.

To view this discussion on the web visit https://groups.google.com/d/msgid/kubernetes-dev/CAFtQ%3DdrPsrGAZnrQbyDLYL%2BKo3n8NY0%2BZMTHFVq0ScHa5TnR2Q%40mail.gmail.com.

[Tim Hockin]

Yeah, having a self-contained example of registering, watching, and
responding to an initializer would be great :)

>>> email to kubernetes-de...@googlegroups.com.

>>> To post to this group, send email to kuberne...@googlegroups.com.
>>> To view this discussion on the web visit
>>> https://groups.google.com/d/msgid/kubernetes-dev/df1f52a8-2d7c-49e1-a656-8f32e272387e%40googlegroups.com.
>>> For more options, visit https://groups.google.com/d/optout.
>>
>>
>> --
>> You received this message because you are subscribed to the Google Groups
>> "Kubernetes developer/contributor discussion" group.
>> To unsubscribe from this group and stop receiving emails from it, send an

>> email to kubernetes-de...@googlegroups.com.

>> To post to this group, send email to kuberne...@googlegroups.com.
>> To view this discussion on the web visit

>> https://groups.google.com/d/msgid/kubernetes-dev/CAFtQ%3DdrPsrGAZnrQbyDLYL%2BKo3n8NY0%2BZMTHFVq0ScHa5TnR2Q%40mail.gmail.com.
>>
>> For more options, visit https://groups.google.com/d/optout.
>
>

> --
> You received this message because you are subscribed to the Google Groups
> "Kubernetes developer/contributor discussion" group.
> To unsubscribe from this group and stop receiving emails from it, send an

> email to kubernetes-de...@googlegroups.com.

> To post to this group, send email to kuberne...@googlegroups.com.
> To view this discussion on the web visit

> https://groups.google.com/d/msgid/kubernetes-dev/CAH16ShJB9RXN9y-W65ZjrwqrP%3DCXK6P8Z5Rk7eUBKPoYj2eBFg%40mail.gmail.com.

[Clayton Coleman]

Yes it would :)

[lu...@luxaslabs.com]

I heard Kelsey is working on this for Istio ;)

cc'd Kelsey now

[Clayton Coleman]

I was considering adding a useful example - one that adds a CA to a service account secret automatically, for example.  Might be a few days

To view this discussion on the web visit https://groups.google.com/d/msgid/kubernetes-dev/e71f38bd-a121-4f75-8134-d6c5b1dce036%40googlegroups.com.

[Andy Goldstein]

There is also this PR that is currently in development to use an controller + initializer for persistent volume labeling: https://github.com/kubernetes/kubernetes/pull/44680.

To unsubscribe from this group and stop receiving emails from it, send an email to kubernetes-dev+unsubscribe@googlegroups.com.
To post to this group, send email to kubernetes-dev@googlegroups.com.

To view this discussion on the web visit https://groups.google.com/d/msgid/kubernetes-dev/e71f38bd-a121-4f75-8134-d6c5b1dce036%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

--

You received this message because you are subscribed to the Google Groups "Kubernetes developer/contributor discussion" group.

To unsubscribe from this group and stop receiving emails from it, send an email to kubernetes-dev+unsubscribe@googlegroups.com.
To post to this group, send email to kubernetes-dev@googlegroups.com.

To view this discussion on the web visit https://groups.google.com/d/msgid/kubernetes-dev/-193427072741589715%40unknownmsgid.