1
0
Fork 0
mirror of https://github.com/kyverno/kyverno.git synced 2025-04-06 01:03:33 +00:00
kyverno/pkg
Ioannis Bouloumpasis 78a6f20572
fix: do not remove webhooks during initialization (#3641)
* Do not remove webhooks during initialization

During initialization the Kyverno leader Pod deletes all the
existing webhooks and recreates them. There is a small time window were
the cluster is not protected by the webhooks, allowing a user to apply
resources without any verfication.
This commit updates the leader registration logic to not remove and
recreate the webhooks but, in the case that the webhooks already exist,
update them.

Signed-off-by: Ioannis Bouloumpasis <buluba@arrikto.com>

* Fix linter errors

Signed-off-by: Ioannis Bouloumpasis <buluba@arrikto.com>

* Use the Lister to get webhook configurations

Signed-off-by: Ioannis Bouloumpasis <buluba@arrikto.com>
2022-04-22 14:50:29 +08:00
..
auth Fix Kyverno crash when CRD is not installed (#1353) 2020-12-03 19:19:36 -08:00
autogen refactor: simplify autogen package (#3532) 2022-04-05 15:12:22 +00:00
background refactor: use the typed ns informer in GR controller (#3554) 2022-04-21 14:12:34 +08:00
client Feat - add the new CR UpdateRequest for post mutation (#3592) 2022-04-12 22:37:28 +05:30
common refactor: separate kube utils package (#3527) 2022-04-01 08:34:25 +00:00
compatibility feat: stop mutating rules (#3410) 2022-03-28 22:01:27 +08:00
config Add support for custom image extractors (#3596) 2022-04-14 09:08:30 -07:00
cosign Image verify attestors (#3614) 2022-04-19 08:35:12 -07:00
dclient Replace ToUnstructured() with Marshal/Unmarshal (#3150) 2022-03-17 14:20:24 +00:00
engine refactor: image utils (#3630) 2022-04-20 15:01:02 +00:00
event refactor: remove ns lister from webhookconfig (#3452) 2022-03-23 16:04:02 +08:00
leaderelection Remove unused function (#2517) 2021-10-11 12:46:28 -07:00
metrics refactor: metrics package (#3549) 2022-04-07 02:14:13 +08:00
openapi refactor: separate kube utils package (#3527) 2022-04-01 08:34:25 +00:00
policy refactor cli code from pkg to cmd (#3591) 2022-04-14 12:20:18 +00:00
policycache Fix race condition in pCache (#3632) 2022-04-20 15:30:20 +05:30
policymutation refactor: reduce policy mutations (#3550) 2022-04-05 16:28:33 +08:00
policyreport refactor: make response type (RuleType) typed (#3556) 2022-04-06 19:04:08 +00:00
registryclient Add a registry flag to allow direct access to container registries in the CLI (#3396) 2022-03-16 09:56:47 +05:30
resourcecache refactor: separate kube utils package (#3527) 2022-04-01 08:34:25 +00:00
signal Dynamic webhooks (#2425) 2021-10-05 00:15:09 -07:00
testrunner refactor: make use of policy interface (#3499) 2022-03-30 18:34:30 +05:30
tls fix deployment replica type conversion and refactor webhook logs (#3022) 2022-01-19 17:14:33 +00:00
toggle feat: stop mutating rules (#3410) 2022-03-28 22:01:27 +08:00
userinfo chore: remove dead code (#3561) 2022-04-11 08:47:18 +00:00
utils refactor: image utils (#3630) 2022-04-20 15:01:02 +00:00
version Revert "754 merge conflicts" 2020-03-28 16:36:19 +05:30
webhookconfig fix: do not remove webhooks during initialization (#3641) 2022-04-22 14:50:29 +08:00
webhooks refactor: use the typed ns informer in GR controller (#3554) 2022-04-21 14:12:34 +08:00