Webhooks

来源 1 浏览 178 扫码打印 2021-10-20 07:47:14

Webhook management in Operator Lifecycle Manager

See Defining cluster service versions (CSVs) for details on how an Operator developer can define webhooks for their Operator, as well as considerations when running on OLM.

Kubernetes documentation:

About
- Welcome
- Legal notice
API reference
- API list
- Authorization APIs
  - SubjectAccessReview [authorization.k8s.io/v1]
  - LocalResourceAccessReview [authorization.openshift.io/v1]
  - SubjectRulesReview [authorization.openshift.io/v1]
  - SubjectAccessReview [authorization.openshift.io/v1]
  - About Authorization APIs
  - SelfSubjectRulesReview [authorization.openshift.io/v1]
  - SelfSubjectAccessReview [authorization.k8s.io/v1]
  - TokenReview [authentication.k8s.io/v1]
  - LocalSubjectAccessReview [authorization.openshift.io/v1]
  - SelfSubjectRulesReview [authorization.k8s.io/v1]
  - ResourceAccessReview [authorization.openshift.io/v1]
  - LocalSubjectAccessReview [authorization.k8s.io/v1]
- Autoscale APIs
  - About Autoscale APIs
  - ClusterAutoscaler [autoscaling.openshift.io/v1]
  - HorizontalPodAutoscaler [autoscaling/v1]
  - MachineAutoscaler [autoscaling.openshift.io/v1beta1]
- Common object reference
  - Index
- Config APIs
  - ClusterVersion [config.openshift.io/v1]
  - Ingress [config.openshift.io/v1]
  - Console [config.openshift.io/v1]
  - OAuth [config.openshift.io/v1]
  - OperatorHub [config.openshift.io/v1]
  - Scheduler [config.openshift.io/v1]
  - HelmChartRepository [helm.openshift.io/v1beta1]
  - Build [config.openshift.io/v1]
  - ClusterOperator [config.openshift.io/v1]
  - Authentication [config.openshift.io/v1]
  - APIServer [config.openshift.io/v1]
  - Network [config.openshift.io/v1]
  - FeatureGate [config.openshift.io/v1]
  - Infrastructure [config.openshift.io/v1]
  - DNS [config.openshift.io/v1]
  - Project [config.openshift.io/v1]
  - About Config APIs
  - Image [config.openshift.io/v1]
  - Proxy [config.openshift.io/v1]
- Console APIs
  - ConsoleYAMLSample [console.openshift.io/v1]
  - ConsoleNotification [console.openshift.io/v1]
  - ConsoleCLIDownload [console.openshift.io/v1]
  - About Console APIs
  - ConsoleExternalLogLink [console.openshift.io/v1]
  - ConsoleLink [console.openshift.io/v1]
  - ConsoleQuickStart [console.openshift.io/v1]
- Extension APIs
  - About Extension APIs
  - MutatingWebhookConfiguration [admissionregistration.k8s.io/v1]
  - CustomResourceDefinition [apiextensions.k8s.io/v1]
  - APIService [apiregistration.k8s.io/v1]
  - ValidatingWebhookConfiguration [admissionregistration.k8s.io/v1]
- Image APIs
  - Image [image.openshift.io/v1]
  - ImageSignature [image.openshift.io/v1]
  - ImageStreamImage [image.openshift.io/v1]
  - ImageTag [image.openshift.io/v1]
  - ImageStreamImport [image.openshift.io/v1]
  - About Image APIs
  - ImageStreamTag [image.openshift.io/v1]
  - ImageStream [image.openshift.io/v1]
  - ImageStreamMapping [image.openshift.io/v1]
- Machine APIs
  - MachineConfigPool [machineconfiguration.openshift.io/v1]
  - MachineHealthCheck [machine.openshift.io/v1beta1]
  - MachineConfig [machineconfiguration.openshift.io/v1]
  - ControllerConfig [machineconfiguration.openshift.io/v1]
  - About Machine APIs
  - Machine [machine.openshift.io/v1beta1]
  - MachineSet [machine.openshift.io/v1beta1]
  - KubeletConfig [machineconfiguration.openshift.io/v1]
  - ContainerRuntimeConfig [machineconfiguration.openshift.io/v1]
- Metadata APIs
  - Event [core/v1]
  - Binding [core/v1]
  - About Metadata APIs
  - ControllerRevision [apps/v1]
  - Event [events.k8s.io/v1]
  - ComponentStatus [core/v1]
  - Lease [coordination.k8s.io/v1]
  - Namespace [core/v1]
  - ConfigMap [core/v1]
- Monitoring APIs
  - About Monitoring APIs
  - Probe [monitoring.coreos.com/v1]
  - ServiceMonitor [monitoring.coreos.com/v1]
  - PrometheusRule [monitoring.coreos.com/v1]
  - AlertmanagerConfig [monitoring.coreos.com/v1alpha1]
  - Prometheus [monitoring.coreos.com/v1]
  - PodMonitor [monitoring.coreos.com/v1]
  - ThanosRuler [monitoring.coreos.com/v1]
  - Alertmanager [monitoring.coreos.com/v1]
- Network APIs
  - EgressNetworkPolicy [network.openshift.io/v1]
  - IngressClass [networking.k8s.io/v1]
  - About Network APIs
  - ClusterNetwork [network.openshift.io/v1]
  - Endpoints [core/v1]
  - Service [core/v1]
  - NetworkPolicy [networking.k8s.io/v1]
  - Ingress [networking.k8s.io/v1]
  - PodNetworkConnectivityCheck [controlplane.operator.openshift.io/v1alpha1]
  - HostSubnet [network.openshift.io/v1]
  - Route [route.openshift.io/v1]
  - NetNamespace [network.openshift.io/v1]
  - NetworkAttachmentDefinition [k8s.cni.cncf.io/v1]
  - IPPool [whereabouts.cni.cncf.io/v1alpha1]
  - EndpointSlice [discovery.k8s.io/v1beta1]
- Node APIs
  - Tuned [tuned.openshift.io/v1]
  - About Node APIs
  - Profile [tuned.openshift.io/v1]
  - RuntimeClass [node.k8s.io/v1]
  - Node [core/v1]
- OAuth APIs
  - OAuthAccessToken [oauth.openshift.io/v1]
  - About OAuth APIs
  - UserOAuthAccessToken [oauth.openshift.io/v1]
  - OAuthAuthorizeToken [oauth.openshift.io/v1]
  - OAuthClient [oauth.openshift.io/v1]
  - OAuthClientAuthorization [oauth.openshift.io/v1]
- Operator APIs
  - CloudCredential [operator.openshift.io/v1]
  - ServiceCA [operator.openshift.io/v1]
  - Config [imageregistry.operator.openshift.io/v1]
  - ImagePruner [imageregistry.operator.openshift.io/v1]
  - CSISnapshotController [operator.openshift.io/v1]
  - Storage [operator.openshift.io/v1]
  - Config [operator.openshift.io/v1]
  - KubeControllerManager [operator.openshift.io/v1]
  - IngressController [operator.openshift.io/v1]
  - OpenShiftAPIServer [operator.openshift.io/v1]
  - DNS [operator.openshift.io/v1]
  - About Operator APIs
  - Network [operator.openshift.io/v1]
  - KubeStorageVersionMigrator [operator.openshift.io/v1]
  - KubeAPIServer [operator.openshift.io/v1]
  - KubeScheduler [operator.openshift.io/v1]
  - ImageContentSourcePolicy [operator.openshift.io/v1alpha1]
  - Config [samples.operator.openshift.io/v1]
  - ClusterCSIDriver [operator.openshift.io/v1]
  - Etcd [operator.openshift.io/v1]
  - DNSRecord [ingress.operator.openshift.io/v1]
  - Authentication [operator.openshift.io/v1]
  - OperatorPKI [network.operator.openshift.io/v1]
  - Console [operator.openshift.io/v1]
  - OpenShiftControllerManager [operator.openshift.io/v1]
- OperatorHub APIs
  - Subscription [operators.coreos.com/v1alpha1]
  - PackageManifest [packages.operators.coreos.com/v1]
  - CatalogSource [operators.coreos.com/v1alpha1]
  - Operator [operators.coreos.com/v1]
  - ClusterServiceVersion [operators.coreos.com/v1alpha1]
  - OperatorGroup [operators.coreos.com/v1]
  - OperatorCondition [operators.coreos.com/v1]
  - InstallPlan [operators.coreos.com/v1alpha1]
  - About OperatorHub APIs
- Policy APIs
  - About Policy APIs
  - PodDisruptionBudget [policy/v1beta1]
- Project APIs
  - ProjectRequest [project.openshift.io/v1]
  - Project [project.openshift.io/v1]
  - About Project APIs
- Provisioning APIs
  - Provisioning [metal3.io/v1alpha1]
  - About Provisioning APIs
  - BareMetalHost [metal3.io/v1alpha1]
- RBAC APIs
  - About RBAC APIs
  - ClusterRole [rbac.authorization.k8s.io/v1]
  - ClusterRoleBinding [rbac.authorization.k8s.io/v1]
  - RoleBinding [rbac.authorization.k8s.io/v1]
  - Role [rbac.authorization.k8s.io/v1]
- Role APIs
  - RoleBindingRestriction [authorization.openshift.io/v1]
  - ClusterRole [authorization.openshift.io/v1]
  - About Role APIs
  - RoleBinding [authorization.openshift.io/v1]
  - Role [authorization.openshift.io/v1]
  - ClusterRoleBinding [authorization.openshift.io/v1]
- Schedule and quota APIs
  - AppliedClusterResourceQuota [quota.openshift.io/v1]
  - FlowSchema [flowcontrol.apiserver.k8s.io/v1alpha1]
  - ClusterResourceQuota [quota.openshift.io/v1]
  - About Schedule and quota APIs
  - PriorityClass [scheduling.k8s.io/v1]
  - ResourceQuota [core/v1]
  - LimitRange [core/v1]
  - PriorityLevelConfiguration [flowcontrol.apiserver.k8s.io/v1alpha1]
- Security APIs
  - SecurityContextConstraints [security.openshift.io/v1]
  - RangeAllocation [security.openshift.io/v1]
  - PodSecurityPolicySelfSubjectReview [security.openshift.io/v1]
  - PodSecurityPolicySubjectReview [security.openshift.io/v1]
  - About Security APIs
  - ServiceAccount [core/v1]
  - PodSecurityPolicyReview [security.openshift.io/v1]
  - Secret [core/v1]
  - CertificateSigningRequest [certificates.k8s.io/v1]
  - CredentialsRequest [cloudcredential.openshift.io/v1]
- Storage APIs
  - About Storage APIs
  - StorageVersionMigration [migration.k8s.io/v1alpha1]
  - VolumeAttachment [storage.k8s.io/v1]
  - VolumeSnapshot [snapshot.storage.k8s.io/v1]
  - VolumeSnapshotContent [snapshot.storage.k8s.io/v1]
  - PersistentVolumeClaim [core/v1]
  - VolumeSnapshotClass [snapshot.storage.k8s.io/v1]
  - CSINode [storage.k8s.io/v1]
  - StorageClass [storage.k8s.io/v1]
  - StorageState [migration.k8s.io/v1alpha1]
  - CSIDriver [storage.k8s.io/v1]
- Template APIs
  - Template [template.openshift.io/v1]
  - TemplateInstance [template.openshift.io/v1]
  - BrokerTemplateInstance [template.openshift.io/v1]
  - About Template APIs
  - PodTemplate [core/v1]
- User and group APIs
  - UserIdentityMapping [user.openshift.io/v1]
  - Group [user.openshift.io/v1]
  - User [user.openshift.io/v1]
  - Identity [user.openshift.io/v1]
  - About User and group APIs
- Workloads APIs
  - DeploymentConfig [apps.openshift.io/v1]
  - Build [build.openshift.io/v1]
  - PersistentVolume [core/v1]
  - DaemonSet [apps/v1]
  - Job [batch/v1]
  - BuildConfig [build.openshift.io/v1]
  - StatefulSet [apps/v1]
  - ReplicaSet [apps/v1]
  - About Workloads APIs
  - ReplicationController [core/v1]
  - CronJob [batch/v1beta1]
  - Pod [core/v1]
  - Deployment [apps/v1]
- Editing kubelet log level verbosity and gathering logs
Applications
- Monitoring project and application metrics using the Developer perspective
- Pruning objects to reclaim resources
- Idling applications
- Monitoring application health
- Application life cycle management
- Deployments
- Projects
- Quotas
  - Resource quotas per project
  - Resource quotas across multiple projects
- Using the Red Hat Marketplace
Architecture
- The control plane
- Installation and update
- Fedora CoreOS
- Understanding OKD development
- Product architecture
Authentication and authorization
- Using service accounts in applications
- Using a service account as an OAuth client
- Configuring OAuth clients
- Impersonating the system:admin user
- Understanding identity provider configuration
- Configuring the internal OAuth server
- Scoping tokens
- Using bound service account tokens
- Managing security context constraints
- Syncing LDAP groups
- Removing the kubeadmin user
- Managing user-owned OAuth access tokens
- Understanding and creating service accounts
- Using RBAC to define and apply permissions
- Managing cloud provider credentials
- Creating and using config maps
- Understanding authentication
- Configuring identity providers
Backup and restore
- Backing up etcd data
- Restarting a cluster gracefully
- Shutting down a cluster gracefully
- Disaster recovery
- Replacing an unhealthy etcd member
CI/CD
- Builds
CLI tools
- Knative CLI (kn) for use with OpenShift Serverless
- opm CLI
- Developer CLI (odo)
- Helm CLI
- OpenShift CLI (oc)
- Operator SDK
  - Installing the Operator SDK CLI
  - Operator SDK CLI reference
- CLI tools overview
Images
- Using image streams with Kubernetes resources
- Using Ruby on Rails
- Triggering updates on image stream changes
- Creating images
- Managing image streams
- Understanding containers, images, and imagestreams
- Image configuration resources
- Using templates
- Using the Cluster Samples Operator with an alternate registry
- Configuring the Cluster Samples Operator
- Managing images
- Using images
Installing
- Validating an installation
- Troubleshooting installation issues
- Mirroring images for a disconnected installation
- Selecting an installation method and preparing a cluster
- Installation overview
- Installation configuration
  - Customizing nodes
  - Configuring your firewall
- Installing on any platform
  - Installing a cluster on any platform
- Installing on AWS
- Installing on Azure
- Installing on bare metal
- Installing on GCP
- Installing on OpenStack
- Installing on RHV
- Installing on VMC
- Installing on vSphere
- Deploying installer-provisioned clusters on bare metal
Logging
- Viewing cluster logs in Kibana
- About Logging
- Uninstalling Logging
- Updating Logging
- Forwarding logs to third party systems
- Viewing logs for a specific resource
- Installing Logging
- Release notes
- Viewing cluster dashboards
- Exported fields
- Enabling JSON logging
- Collecting and storing Kubernetes events
- Configuring your Logging deployment
- Troubleshooting Logging
Machine management
- Deploying machine health checks
- Creating infrastructure machine sets
- Applying autoscaling to a cluster
- User-provisioned infrastructure
- Manually scaling a machine set
- Modifying a machine set
- Deleting a machine
- Creating machine sets
Migrating from version 3 to 4
- Advanced migration options
- About migrating from OKD 3 to 4
- Upgrading MTC
- Migrating your applications
- About MTC
- Troubleshooting
- Installing MTC
- Installing MTC in a restricted network environment
- Differences between OKD 3 and 4
- Premigration checklists
Migration Toolkit for Containers
- Troubleshooting
- About MTC
- Premigration checklists
- Advanced migration options
- Installing MTC in a restricted network environment
- Installing MTC
- Migrating your applications
- Upgrading MTC
Monitoring
- Managing alerts
- Enabling monitoring for user-defined projects
- Reviewing monitoring dashboards
- Managing metrics
- Exposing custom application metrics for autoscaling
- Understanding the monitoring stack
- Accessing third-party UIs
- Configuring the monitoring stack
- Troubleshooting monitoring issues
Networking
- Understanding the Ingress Operator
- Accessing hosts
- Load balancing on OpenStack
- Understanding the Cluster Network Operator
- Configuring a custom PKI
- Understanding the DNS Operator
- Configuring PTP hardware
- Configuring the cluster-wide proxy
- Configuring the node port service range
- Understanding networking
- Using SCTP
- Associating secondary interfaces metrics to network attachments
- Verifying connectivity to an endpoint
- OpenShift SDN default CNI network provider
  - Configuring an egress router pod destination list from a config map
  - Removing an egress firewall from a project
  - About the OpenShift SDN default CNI network provider
  - Deploying an egress router pod in HTTP proxy mode
  - Considerations for the use of an egress router pod
  - Enabling multicast for a project
  - Configuring multitenant isolation
  - Disabling multicast for a project
  - Configuring egress IPs for a project
  - Viewing an egress firewall for a project
  - Configuring kube-proxy
  - Deploying an egress router pod in DNS proxy mode
  - Configuring an egress firewall for a project
  - Deploying an egress router pod in redirect mode
  - Editing an egress firewall for a project
- Configuring ingress cluster traffic
  - Configuring ingress cluster traffic using an Ingress Controller
  - Configuring ingress cluster traffic using a NodePort
  - Configuring ExternalIPs for services
  - Configuring ingress cluster traffic on AWS using a Network Load Balancer
  - Configuring ingress cluster traffic using a load balancer
  - Configuring ingress cluster traffic using a service external IP
  - Overview
- Configuring Routes
  - Secured routes
  - Route configuration
- Hardware networks
  - Configuring an SR-IOV network device
  - Using DPDK and RDMA
  - Configuring an SR-IOV InfiniBand network attachment
  - Adding a pod to an SR-IOV network
  - Using high performance multicast
  - Configuring an SR-IOV Ethernet network attachment
  - Configuring the SR-IOV Operator
  - About Single Root I/O Virtualization (SR-IOV) hardware networks
  - Installing the SR-IOV Operator
- Kubernetes NMState
  - Observing node network state
  - Updating node network configuration
  - About the Kubernetes NMState Operator
  - Troubleshooting node network configuration
- Multiple networks
  - Attaching a pod to an additional network
  - Configuring a macvlan network with basic customizations
  - About virtual routing and forwarding
  - Configuring a host-device network
  - Editing an additional network
  - Configuring a bridge network
  - Configuring a macvlan network
  - Configuring an ipvlan network
  - Removing an additional network
  - Understanding multiple networks
  - Assigning a secondary network to a VRF
  - Removing a pod from an additional network
- Network policy
  - Configuring multitenant network policy
  - Editing a network policy
  - About network policy
  - Creating a network policy
  - Defining a default network policy for projects
  - Viewing a network policy
  - Deleting a network policy
- OVN-Kubernetes default CNI network provider
  - Rolling back to the OpenShift SDN cluster network provider
  - About the OVN-Kubernetes network provider
  - Configuring an egress IP address
  - Editing an egress firewall for a project
  - Enabling multicast for a project
  - IPsec encryption configuration
  - Removing an egress firewall from a project
  - Configuring hybrid networking
  - Disabling multicast for a project
  - Configuring an egress firewall for a project
  - Migrating from the OpenShift SDN cluster network provider
  - Considerations for the use of an egress router pod
  - Viewing an egress firewall for a project
  - Deploying an egress router pod in redirect mode
  - Assigning an egress IP address
Nodes
- Controlling pod placement onto nodes (scheduling)
- Using Jobs and DaemonSets
  - Running background tasks on nodes automatically with daemonsets
  - Running tasks in pods using jobs
- Working with clusters
- Working with containers
- Working with nodes
- Working with pods
Operators
- Red Hat Operators reference
- Administrator tasks
- Developing Operators
- Understanding Operators
- User tasks
  - Installing Operators in your namespace
  - Creating applications from installed Operators
Post-installation configuration
- Cluster tasks
- Network configuration
- Configuring a private cluster
- Node tasks
- Storage configuration
- Configuring alert notifications
- Machine configuration tasks
- Preparing for users
Registry
- Registry options
- Overview
- Exposing the registry
- Image Registry Operator in OKD
- Accessing the registry
- Setting up and configuring the registry
Scalability and performance
- Recommended installation practices
- Optimizing storage
- Using the Node Tuning Operator
- Performance Addon Operator for low latency nodes
- Using CPU Manager
- What huge pages do and how they are consumed by apps
- Recommended host practices
- Optimizing data plane performance with the Intel vRAN Dedicated Accelerator ACC100
- Optimizing routing
- Using Topology Manager
- Managing bare metal hosts
- Scaling the Cluster Monitoring Operator
- Recommended cluster scaling practices
- Optimizing networking
- Using Cluster Loader
- Planning your environment according to object maximums
Security and compliance
- Encrypting etcd data
- Configuring seccomp profiles
- Allowing JavaScript-based access to the API server from additional hosts
- Configuring the audit log policy
- Configuring TLS security profiles
- Viewing audit logs
- Scanning pods for vulnerabilities
- Security and compliance overview
- Compliance Operator
- Configuring certificates
- Container security
- File Integrity Operator
- Certificate types and descriptions
Storage
- Dynamic provisioning
- Understanding ephemeral storage
- Understanding persistent storage
- Expanding persistent volumes
- Configuring persistent storage
- Using Container Storage Interface (CSI)
Support
- Summarizing cluster specifications
- Gathering data about your cluster
- Getting support
- Remote health monitoring with connected clusters
- Troubleshooting
Updating clusters
- Updating a cluster within a minor version from the web console
- Understanding the OpenShift Update Service
- Performing update using canary rollout strategy
- Updating a cluster within a minor version by using the CLI
- Updating a cluster between minor versions
- Installing and configuring the OpenShift Update Service
Web console
- Creating quick start tutorials
- Customizing the web console
- Disabling the web console
- Configuring the web console
- Viewing cluster information
- Web terminal
- Accessing the web console
- Developer perspective
What’s new?
- New features and enhancements
- Deprecated features
Windows Container Support for OpenShift
- Windows Container Support for OpenShift release notes
- Windows node upgrades
- Understanding Windows container workloads
- Scheduling Windows container workloads
- Enabling Windows container workloads
- Removing Windows nodes
- Disabling Windows container workloads
- Creating Windows MachineSet objects

暂无相关搜索结果！

本文档使用全库网构建