Provide Dockerfile and Pod to run the Webhook in kube-system

Author: Saverio Proto

kube-system/Dockerfile

@@ -0,0 +1,15 @@
+FROM ubuntu:16.04
+MAINTAINER Saverio Proto <[email protected]>
+RUN apt-get update && \
+    apt-get install -y software-properties-common
+RUN add-apt-repository -y ppa:masterminds/glide
+RUN apt-get update && \
+    apt-get install -y glide git build-essential golang && \
+    apt-get clean && \
+    rm -rf /var/lib/apt/lists/* /tmp/* /var/tmp/*
+RUN git clone https://github.com/dims/k8s-keystone-auth
+WORKDIR k8s-keystone-auth
+RUN make depend && make build
+EXPOSE 8443
+CMD ./bin/k8s-keystone-auth --tls-cert-file ${API_SERVER_CERT} --tls-private-key-file ${API_SERVER_KEY} --keystone-url ${OPENSTACK_KEYSTONE_URL}
+

kube-system/k8s-keystone-auth.yaml

@@ -0,0 +1,55 @@
+---
+apiVersion: v1
+kind: Pod
+metadata:
+  annotations:
+    scheduler.alpha.kubernetes.io/critical-pod: ""
+  creationTimestamp: null
+  labels:
+    component: k8s-keystone-auth
+    tier: control-plane
+  name: k8s-keystone-auth
+  namespace: kube-system
+spec:
+  containers:
+  - command:
+    - ./bin/k8s-keystone-auth
+    - --tls-cert-file
+    - /etc/kubernetes/pki/apiserver.crt
+    - --tls-private-key-file
+    - /etc/kubernetes/pki/apiserver.key
+    - --keystone-url
+    - https://mykeystone.com:5000/v3
+    image: k8s-keystone-auth
+    imagePullPolicy: Always
+    #livenessProbe:
+    #  failureThreshold: 8
+    #  httpGet:
+    #    host: 127.0.0.1
+    #    path: /healthz
+    #    port: 6443
+    #    scheme: HTTPS
+    #  initialDelaySeconds: 15
+    #  timeoutSeconds: 15
+    name: k8s-keystone-auth
+    resources:
+      requests:
+        cpu: 250m
+    volumeMounts:
+    - mountPath: /etc/kubernetes/pki
+      name: k8s-certs
+      readOnly: true
+    - mountPath: /etc/ssl/certs
+      name: ca-certs
+      readOnly: true
+  hostNetwork: true
+  volumes:
+  - hostPath:
+      path: /etc/kubernetes/pki
+      type: DirectoryOrCreate
+    name: k8s-certs
+  - hostPath:
+      path: /etc/ssl/certs
+      type: DirectoryOrCreate
+    name: ca-certs
+status: {}