k8s学习-CKS真题-ImagePolicyWebhook容器镜像扫描_imagepolicywebhook 容器镜像扫描

最新推荐文章于 2024-08-05 14:04:21 发布

师从阳

最新推荐文章于 2024-08-05 14:04:21 发布

阅读量433

点赞数 3

分类专栏：程序员文章标签： kubernetes 学习容器

本文链接：https://blog.csdn.net/2301_77121488/article/details/138227961

版权

文章介绍了如何在Kubernetes环境中管理imagepolicy配置文件，包括kubeconfig、admissioncontrol和webhook设置的变更，如将defaultAllow设置为false，添加新的server到kubeconfig，以及启用ImagePolicyWebhook插件。同时提到了网络渗透学习路径和IT行业成长的建议。

摘要由CSDN通过智能技术生成

{
  "imagePolicy": {
     "kubeConfigFile": "/etc/kubernetes/kube-image-bouncer.yml",
     "allowTTL": 50,
     "denyTTL": 50,
     "retryBackoff": 500,
     "defaultAllow": true
  }
}

命令

vim /etc/kubernetes/epconfig/kubeconfig.yaml

文件内容如下：

apiVersion: v1
kind: Config

# clusters refers to the remote service.
clusters:
- cluster:
    certificate-authority: /etc/kubernetes/epconfig/external-cert.pem  # CA for verifying the remote service.
    server: server  # URL of remote service to query. Must use 'https'.
  name: image-checker

contexts:
- context:
    cluster: image-checker
    user: api-server
  name: image-checker
current-context: image-checker
preferences: {}

# users refers to the API server's webhook configuration.
users:
- name: api-server
  user:
    client-certificate: /etc/kubernetes/epconfig/apiserver-