Admission Controllers in Kubernetes | Mutating and Validating Webhooks in Kubernetes

In this video we looked into what are admission controllers and when would we want to use them.
We looked into how to register them and talked in detail about most of the field of the Webhook configuration.
Production Kubernetes:
learning.oreilly.com/library/...
Web:
viveksingh.dev/
00:00 Introduction
00:39 Agenda
00:50 What are admission controllers
02:03 Types of admission controllers
03:31 Use cases of admission controllers
07:22 Journey of a request to Kube API Server
10:04 Some pointers about webhook controllers
12:01 Object using which the webhook controller is called
15:50 Why is validating webhook controller is after
17:11 How to configure the webhook controller
18:12 rules
20:31 namespaceSelector and objectSelector
22:48 matchPolicy
25:41 resources in rules
27:01 clientConfig
28:56 admissionReviewVersions
30:01 sideEffects
31:26 timeoutSeconds
31:57 failurePolicy
33:00 reinvocationPolicy
34:47 Idempotent webhook controllers
35:36 Summary
37:41 Like and Subscribe

[@roberto_camp]

Great job Vivek. Love how you are writing the custom webhook example in Go.

[@viveksinghggits]

Thank you

[@elumalaivairamany3887]

Good , Worth of time , very few people only explain like you .

[@viveksinghggits]

Thank you so much.

[@NehaGupta-ni6nn]

Great video and crisp content. Cleared all my concepts. It would be good if this video can be kept 1st in the admission controller's series.

[@viveksinghggits]

Thank you Neha. I will update the playlist.

[@rakirahman1011]

Great video once again Vivek. I didn't realize that the MutatingWebHook can actually call an API sitting outside the K8s cluster, I thought it had to be a pod running inside. If you're planning on doing a demo tutorial of MutatingWebHooks, it'd be interesting if you made a simple API running on Docker Desktop or a Lambda function etc that K8s reaches out to to get the patched JSON and persist it back to etcd to showcase this point

[@viveksinghggits]

Hi 👋 Raki, Yes I do have plans to implement a validating webhook but I was planning to run that inside k8s cluster as pod. But I like what you suggested, let's see if I can do that as well.

[@sai.prasanna]

Very informative video. Thank you for this education. 🙏

[@viveksinghggits]

Thank you for watching.

[@SaravananG]

Good one Vivek!

[@viveksinghggits]

Thank you Saravanan.

[@pavankongara792]

Amazing!

[@viveksinghggits]

Thank you.

[@nittu123456789]

Great Video Vivek

[@viveksinghggits]

Thank you.

[@shamstabrez2986]

bhai bina dkhe bht sara apka videos like krdiya h qki i know u make informative videos which content advanced topics

[@viveksinghggits]

🙏

[@vtvvnha2230]

please make more videos, thank you

[@viveksinghggits]

Sure, thank you.

[@Pgsgopi]

Good video. Can u plz do a video of writing a mutating and admission controller and deploying them

[@viveksinghggits]

Hi, thanks Gopi. Sure, I have plans to make videos on writing admission controllers. Targeting validation webhook controller first and then maybe mutating admission controller.

[@ashrafshaik8051]

Hi Vivek is it possible to file copy or file transfer from pod to server without kubectl and in AWS managed server

[@viveksinghggits]

Hi, kubectl cp is one of the ways that I know of. I am not sure if there are other ways. You can try to write your own tool but I am assuming that's not your use case.

[@gauravsharma1251]

please help me by mistake i have deleted ValidatingAdmissionWebhook. i want to enable it what should i do?

[@viveksinghggits]

Hi Gaurav, There are chances that the resource is checked in to source code repository, for example GitHub or BitBucket. You should check with your team if the resource is available somewhere.