mirrors/kyverno
1
0
Fork 0
mirror of https://github.com/kyverno/kyverno.git synced 2024-12-14 11:57:48 +00:00
Code Activity

fix: block policy admission if kyverno is down (#5677)

Browse source 
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: shuting <shuting@nirmata.com>
This commit is contained in:
Charles-Edouard Brétéché 2022-12-16 08:05:06 +01:00 committed by GitHub
parent 8fd841a912
commit a34bbaa586
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 2 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
pkg/controllers/webhook/controller.go
View file

@ -547,7 +547,7 @@ func (c *controller) buildPolicyMutatingWebhookConfiguration(caBundle []byte) (*
admissionregistrationv1.Update,
},
}},
FailurePolicy: &ignore,
FailurePolicy: &fail,
SideEffects: &noneOnDryRun,
ReinvocationPolicy: &ifNeeded,
AdmissionReviewVersions: []string{"v1"},
@ -569,7 +569,7 @@ func (c *controller) buildPolicyValidatingWebhookConfiguration(caBundle []byte)
admissionregistrationv1.Update,
},
}},
FailurePolicy: &ignore,
FailurePolicy: &fail,
SideEffects: &none,
AdmissionReviewVersions: []string{"v1"},
}},