Skip to content

Commit

Permalink
fix docs
Browse files Browse the repository at this point in the history
Signed-off-by: David J. M. Karlsen <[email protected]>
  • Loading branch information
davidkarlsen committed Jan 14, 2020
1 parent c6d146b commit 5cafb15
Showing 1 changed file with 0 additions and 42 deletions.
42 changes: 0 additions & 42 deletions stable/anchore-admission-controller/templates/NOTES.txt
Original file line number Diff line number Diff line change
@@ -1,43 +1 @@
Anchore admission controller is now installed.

Create a validating webhook resources to start enforcement using the included script:

./files/get_validating_webhook_config.sh <releasename>
kubectl apply -f validating-webhook.yaml


KUBE_CA=$(kubectl config view --minify=true --flatten -o json | jq '.clusters[0].cluster."certificate-authority-data"' -r)
cat > validating-webhook.yaml <<EOF
apiVersion: admissionregistration.k8s.io/v1beta1
kind: ValidatingWebhookConfiguration
metadata:
name: {{ template "anchore-admission-controller.fullname" . }}.admission.anchore.io
webhooks:
- name: {{ template "anchore-admission-controller.fullname" . }}.admission.anchore.io
clientConfig:
service:
namespace: default
name: kubernetes
path: /apis/admission.anchore.io/v1beta1/imagechecks
caBundle: $KUBE_CA
rules:
- operations:
- CREATE
apiGroups:
- ""
apiVersions:
- "*"
resources:
- pods
failurePolicy: Fail
# Uncomment this and customize to exclude specific namespaces from the validation requirement
# namespaceSelector:
# matchExpressions:
# - key: exclude.admission.anchore.io
# operator: NotIn
# values: ["true"]
EOF




0 comments on commit 5cafb15

Please sign in to comment.