denyenv-validating-admission-webhook
An Kubernetes validating admission webhook that rejects pods that use environment variables.
by kelseyhightowerJavaScript
Meet the team
See all 1 on GitHub →
Commit activity
Last 12 weeks · 0 commits
Community health
2 of 6 standards met
42
✓README✓License○Contributing○Code of Conduct○Issue Template○PR Template
Recent PRs & issues
Quiet · 4 in progress · Last activity 7y ago
See all on GitHub →
Updating namespaces exists admission controller link in the README
Hello, Do you know how would this work now given Cloud Functions are authenticated? I see "Your client does not have permission to get URL /denyenv?timeout=30s from this server." in the kubernetes get events log. Going by https://cloud.google.com/functions/docs/securing/authenticating#function-to-function, I need to pass in an Authorization Header and not sure how would I do that in a ValidatingWebhookConfiguration. Spotted one typo on the README. The manifest field is webhooks: and not webHooks: May be it changed between versions. Many thanks, Pankaj
I'm wondering if implementing admission webhooks as FaaS can be like trying to re-invent the wheel when we can work with OPA . Can you please give us your opinion ?
Recent fixes
When I set to API returns . What should I do for validating all resources?
Structured data for AI agents
Repository: kelseyhightower/denyenv-validating-admission-webhook. Description: An Kubernetes validating admission webhook that rejects pods that use environment variables. Stars: 159, Forks: 25. Primary language: JavaScript. Languages: JavaScript (100%). License: Apache-2.0. Topics: faas, gcp-cloud-functions, kubernetes, serverless. Open PRs: 4, open issues: 2. Last activity: 7y ago. Community health: 42%. Top contributors: kelseyhightower.