microshift icon indicating copy to clipboard operation
microshift copied to clipboard

[Enhancement]: Enable AdmisionPlugins

Open cmwylie19 opened this issue 3 years ago • 0 comments

Design Document Link

PR: #--

What would you like to be added:

Enable admission controllers in MicroShift all in one.

Why is this needed:

This is needed to simulate OpenShift's Admission Controllers. We are working with applications that are meant to be deployed on OpenShift.

When we deploy an app that is destined to run in an OpenShift environment, and it runs in a MicroShift environment, we can be somewhat sure that it will likely run in OpenShift if it runs in MicroShift.

Attempts so far

  • Using a custom written admisson webhook using MutatingWebhookConfiguration
  • Enabling --enable-admission-plugins=NodeRestriction,PodSecurityPolicy on kube-apiserver

Maybe the next attempt is the opa sidecar with kube-mgmt

cmwylie19 avatar Jun 06 '22 11:06 cmwylie19

/kind feature

dhellmann avatar Aug 21 '22 17:08 dhellmann

This should be done in the main branch now.

dhellmann avatar Aug 22 '22 16:08 dhellmann

Thank you @dhellmann

cmwylie19 avatar Aug 23 '22 16:08 cmwylie19