5.6.7. Webhook 정의

• 승인 Webhook(검증 및 변경)
• 변환 Webhook

프로세스

• Operator CSV의 spec 섹션에 webhookdefinitions 섹션을 추가하고 ValidatingAdmissionWebhook, MutatingAdmissionWebhook 또는 ConversionWebhook type을 사용하여 Webhook 정의를 포함합니다. 다음 예제에는 세 가지 유형의 Webhook가 모두 포함되어 있습니다.

  Webhook를 포함하는 CSV

    apiVersion: operators.coreos.com/v1alpha1
    kind: ClusterServiceVersion
    metadata:
      name: webhook-operator.v0.0.1
    spec:
      customresourcedefinitions:
        owned:
        - kind: WebhookTest
          name: webhooktests.webhook.operators.coreos.io 

  1

  
          version: v1
      install:
        spec:
          deployments:
          - name: webhook-operator-webhook
            ...
            ...
            ...
        strategy: deployment
      installModes:
      - supported: false
        type: OwnNamespace
      - supported: false
        type: SingleNamespace
      - supported: false
        type: MultiNamespace
      - supported: true
        type: AllNamespaces
      webhookdefinitions:
      - type: ValidatingAdmissionWebhook 

  2

  
        admissionReviewVersions:
        - v1beta1
        - v1
        containerPort: 443
        targetPort: 4343
        deploymentName: webhook-operator-webhook
        failurePolicy: Fail
        generateName: vwebhooktest.kb.io
        rules:
        - apiGroups:
          - webhook.operators.coreos.io
          apiVersions:
          - v1
          operations:
          - CREATE
          - UPDATE
          resources:
          - webhooktests
        sideEffects: None
        webhookPath: /validate-webhook-operators-coreos-io-v1-webhooktest
      - type: MutatingAdmissionWebhook 

  3

  
        admissionReviewVersions:
        - v1beta1
        - v1
        containerPort: 443
        targetPort: 4343
        deploymentName: webhook-operator-webhook
        failurePolicy: Fail
        generateName: mwebhooktest.kb.io
        rules:
        - apiGroups:
          - webhook.operators.coreos.io
          apiVersions:
          - v1
          operations:
          - CREATE
          - UPDATE
          resources:
          - webhooktests
        sideEffects: None
        webhookPath: /mutate-webhook-operators-coreos-io-v1-webhooktest
      - type: ConversionWebhook 

  4

  
        admissionReviewVersions:
        - v1beta1
        - v1
        containerPort: 443
        targetPort: 4343
        deploymentName: webhook-operator-webhook
        generateName: cwebhooktest.kb.io
        sideEffects: None
        webhookPath: /convert
        conversionCRDs:
        - webhooktests.webhook.operators.coreos.io 

  5

  
  ...

  Copy to Clipboard Toggle word wrap

  1

  변환 Webhook에서 대상으로 하는 CRD는 여기에 있어야 합니다.

  2

  검증 승인 Webhook입니다.

  3

  변경 승인 Webhook.

  4

  변환 Webhook입니다.

  5

  각 CRD의 spec.PreserveUnknownFields 속성을 false 또는 nil로 설정해야 합니다.