-
## Question
From https://github.com/sbose78/service-binding-admission-controller/blob/master/README.md#validating-admission-webhook-for-service-binding
> A simple admission webhook which rejects…
-
**What happened**:
When a user makes a modifying request to an object through the /scale subresource, the /scale admission chain is called, but mutating and validating admission for the underlying re…
-
**Is your feature request related to a problem? Please describe.**
Now that we have updated to the latest `kube-rs` version in #361, we can take advantage of [`kube-rs`'s admission controller](https:…
-
https://www.zeng.dev/post/2021-denyenv-validating-admission-webhook/
-
When compared to client-side apply that doesn't send empty `{}` patches, server-side apply always sends the manifest.
When no-op apply is sent, it triggers the full mutation/admission which can cause…
-
I ran `k2tf` on this document https://raw.githubusercontent.com/kubernetes/ingress-nginx/ingress-nginx-2.11.3/deploy/static/provider/cloud/deploy.yaml, which contains this resource definition:
```
…
-
**Describe the issue**
CKV2_K8S_1-5 check if ClusterRoleBindings have access to read all secrets, impersonate permissions, set nodes/proxy or pods/exec by checking for wildcards, etc. However, they …
-
We need to put some validation logic into the CRDs to avoid error cases that will only show up in the controllers. This will likely mean adding validating webhooks or using [Validating Admission Polic…
-
**What steps did you take and what happened:**
Not able to prevent namespace deletion. Below are my OPA Gatekeeper version and constrainttemplate.
**What did you expect to happen:**
I expect…
-
### Kyverno Version
1.11.1
### Kubernetes Version
1.20.x
### Kubernetes Platform
Minikube
### Kyverno Rule Type
Validate
### Description
I created a policy with CEL and enabled generating Val…