# apiserver_auth_webhook

**Repository Path**: liushiju/apiserver_auth_webhook

## Basic Information

- **Project Name**: apiserver_auth_webhook
- **Description**: 简易k8s APIServer认证webhook，基于github Token
- **Primary Language**: Unknown
- **License**: Not specified
- **Default Branch**: master
- **Homepage**: None
- **GVP Project**: No

## Statistics

- **Stars**: 0
- **Forks**: 0
- **Created**: 2022-06-23
- **Last Updated**: 2022-06-23

## Categories & Tags

**Categories**: Uncategorized

**Tags**: None

## README

### 启动认证服务

```sh
make build
./bin/amd64/apiserver_auth_webhook
```

### 创建webhook配置

```sh
mkdir -p /etc/config
cp webhook-config.json /etc/config
```

### 备份旧kube-apiserver.yaml文件

```sh
cp /etc/kubernetes/manifests/kube-apiserver.yaml ~/kube-apiserver.yaml
```

### 升级apiserver配置去开启支持webhook

```sh
cp specs/kube-apiserver.yaml /etc/kubernetes/manifests/kube-apiserver.yaml
```

### 在 github 中创建个人访问令牌，并将你的 github 个人访问令牌放入 kubeconfig

```sh
Settings --> Developer settings --> Personal access tokens
```

```sh
vi ~/.kube/config
```

```yaml
- name: shijuliu
  user:
    token: <mytoken>
```
![config](images/config.png)

### 通过shijuliu获取pod

```sh
kubectl get po --user shijuliu
```
![test](images/test.png)
![authbin](images/authbin.png)

### 重置环境

```sh
cp ~/kube-apiserver.yaml /etc/kubernetes/manifests/kube-apiserver.yaml
```