[TOC] ### **安装集群** 安装好k8s集群，kube-apiserver的`--enable-admission-plugins`中要开启以下两个参数： ``` --enable-admission-plugins=MutatingAdmissionWebhook,ValidatingAdmissionWebhook... ... ``` ### **发布AdmissionController** 把程序编译成一个二进制文件，然后在102主机上运行起来 AdmissionReview、AdmissionRequest、AdmissionResponse的结构定义可以参考 https://pkg.go.dev/k8s.io/api/admission ### **创建MutatingWebhookConfiguration** ``` apiVersion: admissionregistration.k8s.io/v1 kind: MutatingWebhookConfiguration metadata: name: gpu-mounter webhooks: - name: gpu-mounter clientConfig: url: http://192.168.2.102:10000/mount rules: - apiGroups: [""] apiVersion: ["v1"] resources: ["pods"] operations: ["CREATE"] namespaceSelector: matchLabels: mountgpu: yes objectSelector: matchLabels: mountgpu: yes ``` ### **发布一个Pod** ``` apiVersion: v1 kind: Pod metadata: name: gpupod labels: mountgpu: yes spec: containers: - image: nginx:1.17.10 ``` ### **参考** * https://pkg.go.dev/k8s.io/api/admission