-
Currently, the admissionWebhooks run in the same pods as the primary NGINX services. This configuration works well in many scenarios, but poses a challenge when using a full overlay network, like Ca…
-
## What did you do
- Set up Rootless Podman and Podman Docker compatibility
- Create a Fedora Toolbox container
- Install k3d inside the container
- Run `k3d cluster create`
## What did you e…
-
Kubernetes 1.19 allows returning warnings in API responses:
https://kubernetes.io/blog/2020/09/03/warnings/?s=03
Perhaps we can use this to report policy violations?
-
### Problem statement
#5103 tries to solve #5061 but leaves the CRD validations unreviewed.
For instance:
- `KongConsumer`'s `Username` is required ([enforced in admission webhook](https://g…
-
Hello team,
We have seen a problem as ssl cert of nginx ingress controller got expired recently and we renewed the ssl cert and deleted the existing tls secret and created the new tls secret . But …
-
**Description:**
The Karmada Certificate Lifecycle Management project is dedicated to systematically addressing the challenges faced by Karmada users related to certificate management, particularly…
-
/kind bug
**What steps did you take and what happened:**
Created an extension with an uppercase name. It failed to create with this message:
```
Message: extension failed to…
-
Inside the webhook-server chart/kargo. If you disable TLS the webhook-server sits in initialization because it can't find the cert that won't be created.
: 0.44.0 & 0.49.0
**Kubernetes version** (use `kubectl version`): 1.18.8
**Environment**:
…
-
### Kyverno Version
1.11.4
### Description
## Background
Kyverno often has very privileged validation webhooks. Depending on the ClusterPolicies the user has applied, they can impact literally a…