minishift-addons icon indicating copy to clipboard operation
minishift-addons copied to clipboard

dynamic-admission-controllers not working with 3.11 and enabled "admission controller webhooks"

Open matzew opened this issue 7 years ago • 1 comments

On Minishift with patched oc v3.11 binary, and a workaround to enable admission controller webhooks, the dynamic-admission-controllers addon is not working.

Work-around:

minishift openshift config set --target=kube --patch '{
    "admissionConfig": {
        "pluginConfig": {
            "ValidatingAdmissionWebhook": {
                "configuration": {
                    "apiVersion": "apiserver.config.k8s.io/v1alpha1",
                    "kind": "WebhookAdmission",
                    "kubeConfigFile": "/dev/null"
                }
            },
            "MutatingAdmissionWebhook": {
                "configuration": {
                    "apiVersion": "apiserver.config.k8s.io/v1alpha1",
                    "kind": "WebhookAdmission",
                    "kubeConfigFile": "/dev/null"
                }
            }
        }
    }
}'

See bugzilla why that is needed.

the deployment of the dynamic-admission-controllers are not working:

minishift addon apply dynamic-admission-controllers

gives me:

-- Applying addon 'dynamic-admission-controllers':
Enable required admission configs..Error applying the add-on: Error executing command 'ssh command error:
command : /var/lib/minishift/bin/oc ex config patch /var/lib/minishift/base/kube-apiserver/master-config.yaml.dac -p '{"admissionConfig": {"pluginConfig": {"MutatingAdmissionWebhook": {"configuration": {"apiVersion": "v1", "kind": "DefaultAdmissionConfig", "disable": false } }, "ValidatingAdmissionWebhook": {"configuration": {"apiVersion": "v1", "kind": "DefaultAdmissionConfig", "disable": false }}}}}' > /var/lib/minishift/base/kube-apiserver/master-config.new.yaml
err     : exit status 1
output  : error: merging an object in json but data type is not struct, instead is: map

matzew avatar Oct 05 '18 13:10 matzew

@matzew thank you! I can confirm that this workaround also works with minishift + OC v3.10.

douglascamata avatar Feb 13 '19 10:02 douglascamata