gatekeeper icon indicating copy to clipboard operation
gatekeeper copied to clipboard

Verify that Gatekeeper CRDs are not affected by K8s CABundle validation on CRD

Open JaydipGabani opened this issue 6 months ago • 1 comments

Let's make sure that Gatekeeper CRDs are not affected by https://github.com/kubernetes/kubernetes/pull/124061, which is included in k8s 1.31.

The change makes sure that CustomResourceDefinition objects created with non-empty caBundle fields which are invalid or do not contain any certificates will not appear in discovery or serve endpoints until a valid caBundle is provided. Updates to CustomResourceDefinition are no longer allowed to transition a valid caBundle field to an invalid caBundle field, because this breaks serving of the existing CustomResourceDefinition.

JaydipGabani avatar Aug 15 '24 19:08 JaydipGabani