You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Describe the bug:
When deploying vault-secrets-webhook on AWS managed Kubernetes cluster (EKS) using Helm, the webhook is self-mutated despite of security.banzaicloud.io/mutate annotation on its pods.
We figured out that the MutatingWebhookConfiguration deployed in this cluster was missing the objectSelector directive whereas the cluster is running on v1.16.
$ kubectl version --short
Client Version: v1.18.2
Server Version: v1.16.8-eks-e16311
This is caused by Helm reporting .Capabilities.KubeVersion.Minor value of 16+ instead of 16. This value becomes 0 when casted to an integer:
{{- if and (eq (int $major) 1) (ge (int $minor) 15) }}
objectSelector:
[...]
{{- end }}
Expected behaviour:
The objectSelector directive should be present on MutatingWebhookConfiguration for Kubernetes clusters running version >= v1.15.
Steps to reproduce the bug:
Deploy a Kubernetes cluster using on AWS EKS (version 1.15 or 1.16).
Deploy vault-secrets-webhook using Helm
Try to remove a webhook's pod : you should see it mutating itself
Additional context:
This bug is reproducible on both EKS v1.15 and v1.16.
Environment details:
Kubernetes version (e.g. v1.10.2): v1.16.8-eks-e16311
Describe the bug:
When deploying
vault-secrets-webhook
on AWS managed Kubernetes cluster (EKS) using Helm, the webhook is self-mutated despite ofsecurity.banzaicloud.io/mutate
annotation on its pods.We figured out that the
MutatingWebhookConfiguration
deployed in this cluster was missing theobjectSelector
directive whereas the cluster is running on v1.16.This is caused by Helm reporting
.Capabilities.KubeVersion.Minor
value of16+
instead of16
. This value becomes0
when casted to an integer:Expected behaviour:
The
objectSelector
directive should be present onMutatingWebhookConfiguration
for Kubernetes clusters running version >= v1.15.Steps to reproduce the bug:
Additional context:
This bug is reproducible on both EKS v1.15 and v1.16.
Environment details:
Buggy
MutatingWebhookConfiguration
deployed on EKS v.1.16/kind bug
The text was updated successfully, but these errors were encountered: