Kubernetes Mutating Webhook

The Kubernetes Mutating Webhook has two parts, the Injector and the Syncer.

The Injector uses a YAML definition that maps secrets in a VP-DV tenant to variables in the Kubernetes secrets area. It runs when the cluster starts, sets these variables, and populates them with the secrets data from VP-DV.

Then the Syncer runs as a cron task, generally every minute, that updates the Kubernetes environment with updates that happen in VP-DV.

Architecture

The illustration shows an example of a Kubernetes Mutating Webhook architecture implementation.

Implementing the Kubernetes Mutating Webhook

Tools for implementing the Kubernetes Mutating Webhook are found on the GitHub page for the Kubernetes Secrets Injector and Syncer.