wip: first dummy version working

Author: manzil-infinity180

Makefile

@@ -1,6 +1,6 @@
 APP_NAME = k8s-custom-controller
 DOCKER_USER = manzilrahul
-VERSION ?= 1.0.15
+VERSION ?= 1.0.9
 IMAGE_NAME = $(DOCKER_USER)/$(APP_NAME)
 
 # 🖼️ Logo banner

certs/tls.crt

@@ -0,0 +1,29 @@
+-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

certs/tls.key

@@ -0,0 +1,52 @@
+-----BEGIN PRIVATE KEY-----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+-----END PRIVATE KEY-----

main.go

@@ -132,7 +132,15 @@ func main() {
 		fmt.Errorf("%s", err.Error())
 	}
 
-	http.HandleFunc("/validate", ValidateDeployment)
+	// Start the webhook server in a goroutine
+	go func() {
+		http.HandleFunc("/validate", ValidateDeployment)
+		log.Println("Starting webhook server on :8000...")
+		err := http.ListenAndServeTLS(":8000", "/certs/tls.crt", "/certs/tls.key", nil)
+		if err != nil {
+			log.Fatalf("Failed to start webhook server: %v", err)
+		}
+	}()
 
 	ch := make(chan struct{})
 	// factory
@@ -142,6 +150,9 @@ func main() {
 	c.Run(ch)
 	fmt.Println(factory)
 	factory.Apps().V1().Deployments().Informer()
+
+	// Block forever
+	select {}
 }
 
 func parseRequest(r *http.Request) (*admissionv1.AdmissionReview, error) {
@@ -171,8 +182,10 @@ type Admitter struct {
 }
 
 func ValidateDeployment(w http.ResponseWriter, r *http.Request) {
+	log.Println("Received /validate request")
 	in, err := parseRequest(r)
 	if err != nil {
+		log.Printf("Error parsing admission request: %v", err)
 		http.Error(w, err.Error(), http.StatusBadRequest)
 		return
 	}
@@ -182,13 +195,15 @@ func ValidateDeployment(w http.ResponseWriter, r *http.Request) {
 	//}
 	var dep appsv1.Deployment
 	if err := json.Unmarshal(in.Request.Object.Raw, &dep); err != nil {
+		log.Printf("Failed to unmarshal deployment: %v", err)
 		http.Error(w, fmt.Sprintf("could not unmarshal deployment: %v", err), http.StatusBadRequest)
 		return
 	}
 	images := []string{}
 	for _, c := range dep.Spec.Template.Spec.Containers {
 		images = append(images, c.Image)
 	}
+	log.Printf("Validating Deployment: %s, Images: %v", dep.Name, images)
 	response := admissionv1.AdmissionReview{
 		TypeMeta: in.TypeMeta,
 		Response: &admissionv1.AdmissionResponse{
@@ -203,8 +218,12 @@ func ValidateDeployment(w http.ResponseWriter, r *http.Request) {
 	jout, err := json.Marshal(response)
 	if err != nil {
 		e := fmt.Sprintf("could not parse admission response: %v", err)
+		log.Println(e)
 		http.Error(w, e, http.StatusInternalServerError)
 		return
 	}
-	w.Write(jout)
+	if _, err := w.Write(jout); err != nil {
+		log.Printf("Failed to write response: %v", err)
+	}
+	log.Println("Admission response sent")
 }

manifest/deployment.yaml

@@ -14,7 +14,7 @@ spec:
     spec:
       containers:
         - name: k8s-controller
-          image: manzilrahul/k8s-custom-controller:latest
+          image: manzilrahul/k8s-custom-controller:1.0.9
           volumeMounts:
             - name: webhook-certs
               mountPath: /certs      # Your code expects "certs/tls.crt"

manifest/k8s-controller-webhook.yaml

@@ -35,7 +35,6 @@ webhooks:
     admissionReviewVersions:
       - v1
     sideEffects: None
-    timeoutSeconds: 30
     clientConfig:
       service:
         name: k8s-custom-controller-service
@@ -67,7 +66,7 @@ spec:
     spec:
       containers:
         - name: k8s-controller
-          image: manzilrahul/k8s-custom-controller:1.0.15
+          image: manzilrahul/k8s-custom-controller:1.0.9
           volumeMounts:
             - name: webhook-certs
               mountPath: /certs
@@ -77,8 +76,6 @@ spec:
               value: "/certs/tls.crt"
             - name: TLS_KEY_FILE
               value: "/certs/tls.key"
-#            - name: BYPASS_CVE_DENIED
-#              value: "yes"  # yes or true (lowercase)
       volumes:
         - name: webhook-certs
           secret: