kubernetes
/
website
mirror of https://github.com/kubernetes/website.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Document the limitation of the Admission Webhook (#8072) 

In current implementation, the webhook *service* must be accessible at
port 443. The communication to the webhook may fail otherwise.
This commit is contained in:
Qiming 2018-04-30 09:39:16 +08:00 committed by k8s-ci-robot
parent b3bb0b6e0a
commit 43bb7f45ca
1 changed files with 6 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
docs/admin/extensible-admission-controllers.md
View File

@ -129,6 +129,12 @@ apiserver sends an `admissionReview` request to webhook as specified in the
After you create the webhook configuration, the system will take a few seconds After you create the webhook configuration, the system will take a few seconds
to honor the new configuration. to honor the new configuration.
**Note** When the webhook plugin is deployed into the Kubernetes cluster as a
service, it has to expose its service on the 443 port. The communication
between the API server and the webhook service may fail if a different port
is used.
{: .note}
### Authenticate apiservers ### Authenticate apiservers
If your admission webhooks require authentication, you can configure the If your admission webhooks require authentication, you can configure the