He shares a real-world example of building a Mutating Webhook that injects secrets from HashiCorp Vault into running applications using pod annotations. The discussion covers:
- How a
500 error in webhooks can prevent pods from launching entirely- The implementation of a custom entry point script for injecting secrets as environment variables
- Why webhooks require extensive unit testing due to their cluster-wide impact
The example demonstrates how seemingly simple webhook implementations can have significant consequences for the entire Kubernetes cluster if not properly tested.
Watch the full episode: https://ku.bz/Dmn93dd7M