fix(server): admission controller trying to validate all cluster reso…

…urces leading to blocking k8s access or other internal issues
kubeshop · Feb 19, 2024 · 4b345b1 · 4b345b1
1 parent a65235c
commit 4b345b1
Showing 1 changed file with 24 additions and 2 deletions.
diff --git a/helm/templates/webhook.yaml b/helm/templates/webhook.yaml
@@ -28,7 +28,29 @@ webhooks:
             {{- end }}
     rules:
       - operations: ["CREATE", "UPDATE"]
-        apiGroups: ["*"]
+        apiGroups: ["apps", "batch", "", "autoscaling", "networking.k8s.io"]
         apiVersions: ["*"]
-        resources: ["*"]
+        resources:
+          - deployments
+          - daemonsets
+          - statefulsets
+          - cronjobs
+          - jobs
+          - pods
+          - services
+          - configmaps
+          - secrets
+          - services
+          - persistentvolumeclaims
+          - ingresses
+        scope: "Namespaced"
+      - operations: ["CREATE", "UPDATE"]
+        apiGroups: ["rbac.authorization.k8s.io", ""]
+        apiVersions: ["*"]
+        resources:
+          - serviceaccounts
+          - roles
+          - rolebindings
+          - clusterroles
+          - clusterrolebindings
         scope: "*"