-
## Describe the bug
There is a rare scenario where the Longhorn instance manager might be missing labels due to an immediate manager crash following instance manager creation. The crash prevents th…
-
### What would you like to be added?
Admission webhooks are HTTP callbacks that receive admission requests and do something with them. Mutating admission webhooks can modify objects sent to the API s…
-
-
**What happened**:
I was doing some tests regarding mutating webhook (especially for istio), and i found a strange behavior.
Stopping a worker instance with a pod of the webhook running on it …
-
When you have a pod with a container running as a different user than the sidecar container, the SVID file can't be read because permission is denied. This is because the file is chmodded as 0600. The…
-
As suggested by @jorsol in https://github.com/fabric8io/kubernetes-client/pull/3363#issuecomment-892806386 , We should test admission and conversion webhooks written using Fabric8 Kubernetes Client. I…
-
# issue
gmsa admission webhook intercepts everything, including pods that have nothing to do with gmsa.
![image](https://github.com/kubernetes-sigs/windows-gmsa/assets/16337726/bfcd84ba-f8de-4b…
-
### Problem statement
Comparing generates resource to decide whether a patch is required has proven to be difficult to get right (e.g. #239 )
Instead of this approach we can utilize a differen…
-
### Kyverno Version
1.12.5
### Kubernetes Version
1.29.x
### Kubernetes Platform
EKS
### Kyverno Rule Type
Validate
### Description
Installed kyverno via helm chart version 3.2.6 and kyverno …
-
### What would you like to be added?
Deprecate PodNodeSelector admission plugin and the associated annotation `scheduler.alpha.kubernetes.io/node-selector`
https://github.com/kubernetes/kubernetes…
ahg-g updated
2 months ago