sighupio / fury-kubernetes-opa

Kubernetes Fury Distribution OPA Core Module: Policy enforcement for your Kubernetes Cluster
https://kubernetesfury.com
BSD 3-Clause "New" or "Revised" License
38 stars 10 forks source link

Update compatibility matrix #38

Closed lnovara closed 3 years ago

lnovara commented 3 years ago

Starting from v1.19 Kubernetes is built against Go 1.15 which in turn disables validation of the webhook certificate CN field. The Gatekeeper version shipped in fury-kubernetes-opa v1.1.0 does not create a certificate using the SANs field, hence the API server fails to contact the webhook.

References:

lnovara commented 3 years ago

Also fury-kubernetes-opa v1.2.0 is affected. I've updated the compatibility matrix accordingly and added a reference to the issue.