security-profiles-operator icon indicating copy to clipboard operation
security-profiles-operator copied to clipboard

[Question] Disable webhook deployment

Open kecebon9 opened this issue 1 year ago • 1 comments
trafficstars

I'm sorry if i put the query on this section

What the impact if we disable webhook deployment?, if we only use seccomp feature (for now) for the profile distribution only without profilebinding, etc.? is it safe?, I tried locally, i still could create/delete the seccompprofile.

Thanks

kecebon9 avatar Jan 15 '24 07:01 kecebon9

The Kubernetes project currently lacks enough contributors to adequately respond to all issues.

This bot triages un-triaged issues according to the following rules:

  • After 90d of inactivity, lifecycle/stale is applied
  • After 30d of inactivity since lifecycle/stale was applied, lifecycle/rotten is applied
  • After 30d of inactivity since lifecycle/rotten was applied, the issue is closed

You can:

  • Mark this issue as fresh with /remove-lifecycle stale
  • Close this issue with /close
  • Offer to help out with Issue Triage

Please send feedback to sig-contributor-experience at kubernetes/community.

/lifecycle stale

k8s-triage-robot avatar Apr 14 '24 07:04 k8s-triage-robot

The Kubernetes project currently lacks enough active contributors to adequately respond to all issues.

This bot triages un-triaged issues according to the following rules:

  • After 90d of inactivity, lifecycle/stale is applied
  • After 30d of inactivity since lifecycle/stale was applied, lifecycle/rotten is applied
  • After 30d of inactivity since lifecycle/rotten was applied, the issue is closed

You can:

  • Mark this issue as fresh with /remove-lifecycle rotten
  • Close this issue with /close
  • Offer to help out with Issue Triage

Please send feedback to sig-contributor-experience at kubernetes/community.

/lifecycle rotten

k8s-triage-robot avatar May 14 '24 07:05 k8s-triage-robot

It should work if you plan to only install the profile but don't do any recording. Also there is an option to disable the dynamic webhook created by the operator and deploy a static webhook via the deployment. You can have a look at https://github.com/kubernetes-sigs/security-profiles-operator/blob/main/deploy/webhook-operator.yaml. Thanks

ccojocar avatar May 14 '24 12:05 ccojocar

Thank you @ccojocar!

kecebon9 avatar May 15 '24 05:05 kecebon9