https://theithollow.com/tags/flask/ Recent content in Flask on The IT Hollow Hugo en-us Tue, 26 May 2020 15:05:00 +0000 https://theithollow.com/2020/05/26/kubernetes-validating-admission-controllers/ Tue, 26 May 2020 15:05:00 +0000 https://theithollow.com/2020/05/26/kubernetes-validating-admission-controllers/ <p>Hey! Who deployed this container in our shared Kubernetes cluster without putting resource limits on it? Why don&rsquo;t we have any labels on these containers so we can report for charge back purposes? Who allowed this image to be used in our production cluster?</p> <p>If any of the questions above sound familiar, its probably time to learn about Validating Admission Controllers.</p> <h2 id="validating-admission-controllers---the-theory">Validating Admission Controllers - The Theory</h2> <p>Admission Controllers are used as a roadblocks before objects are deployed to a Kubernetes cluster. The examples from the section above are common rules that companies might want to enforce before objects get pushed into a production Kubernetes cluster. These admission controllers can be from custom code that you&rsquo;ve written yourself, or a third party admission controller. A common open-source project that manages admission control rules is <a href="https://www.openpolicyagent.org/">Open Policy Agent (OPA)</a>.</p>