In some scenarios where fine-grained permission control is required, you may need to dynamically add the IP addresses of pods to specific whitelists of Alibaba Cloud services. You may also need to remove these IP addresses from specific whitelists of Alibaba Cloud services. You can use ack-kubernetes-webhook-injector to perform these operations. This requires you to add annotations to pod configurations. This topic describes the usage notes of ack-kubernetes-webhook-injector and lists the latest changes to ack-kubernetes-webhook-injector.
For more information about how to use ack-kubernetes-webhook-injector, see Use ack-kubernetes-webhook-injector to dynamically add the IP address of a pod to an RDS whitelist or security group.
|Version||Image address||Release date||Description||Impact|
|v0.0.3-d63ac7e||registry-vpc.cn-hangzhou.aliyuncs.com/acs/k8s-webhook-injector:v0.0.3-d63ac7e||2021-04-12||Access control of Server Load Balancer (SLB) instances is supported.||No impact on workloads|