Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[release-1.27] Add new network policy for ingress controller webhook #5511

Merged

Conversation

brandond
Copy link
Member

Proposed Changes

Add new network policy for ingress controller webhook.

The ingress-nginx chart added a validating webhook a while back, but we did not have a policy that allowed access to it. Access was being allowed by the overly broad network policy that we removed in #5318.

Unfortunately we can't just add this to the existing netpol, as we document that it is not updated once the namespace annotation has been set.

Types of Changes

bugfix

Verification

See linked issue

Testing

Linked Issues

User-Facing Change


Further Comments

Unfortunately we can't just add this to the existing netpol, as we document that it is not updated once the namespace annotation has been set.

Signed-off-by: Brad Davidson <[email protected]>
@brandond brandond requested a review from a team as a code owner February 21, 2024 23:18
@brandond brandond merged commit c1ee4a2 into rancher:release-1.27 Feb 22, 2024
1 check passed
@brandond brandond deleted the allow-ingress-webhook_release-1.27 branch June 6, 2024 23:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants