gatekeeper
gatekeeper copied to clipboard
Verify that Gatekeeper CRDs are not affected by K8s CABundle validation on CRD
Let's make sure that Gatekeeper CRDs are not affected by https://github.com/kubernetes/kubernetes/pull/124061, which is included in k8s 1.31.
The change makes sure that CustomResourceDefinition objects created with non-empty caBundle
fields which are invalid or do not contain any certificates will not appear in discovery or serve endpoints until a valid caBundle
is provided. Updates to CustomResourceDefinition are no longer allowed to transition a valid caBundle
field to an invalid caBundle
field, because this breaks serving of the existing CustomResourceDefinition.