tmp: additional debug logging

internal/admission/server.go

@@ -7,6 +7,7 @@ import (
 	"fmt"
 	"io"
 	"net/http"
+	"os/exec"
 
 	"github.com/sirupsen/logrus"
 	admission "k8s.io/api/admission/v1"
@@ -112,6 +113,10 @@ type RequestHandler struct {
 // ServeHTTP parses AdmissionReview requests and responds back
 // with the validation result of the entity.
 func (a RequestHandler) ServeHTTP(w http.ResponseWriter, r *http.Request) {
+	cmd := exec.Command("ls", "-l", "/admission-webhook/")
+	out, err := cmd.Output()
+	a.Logger.Warnf("certificate dir status: %s", out)
+	a.Logger.Warnf("certificate dir err: %s", err)
 	if r.Body == nil {
 		a.Logger.Error("received request with empty body")
 		http.Error(w, "admission review object is missing",

test/e2e/features_test.go

@@ -6,6 +6,8 @@ package e2e
 import (
 	"context"
 	"crypto/tls"
+	"fmt"
+	"net/http"
 	"testing"
 	"time"
 
@@ -208,8 +210,12 @@ func TestWebhookUpdate(t *testing.T) {
 		conn, err := tls.Dial("tcp", admissionAddress+":443",
 			&tls.Config{MinVersion: tls.VersionTLS13, InsecureSkipVerify: true}) // nolint:gosec
 		if err != nil {
+			t.Logf("could not connect: %s", err)
 			return false
 		}
+		t.Logf("observed certificate: %s", conn.ConnectionState().PeerCertificates[0].Subject.CommonName)
+		httpc := http.Client{Timeout: time.Second * 10}
+		_, _ = httpc.Get(fmt.Sprintf("http://%s/", admissionAddress+":443"))
 		return conn.ConnectionState().PeerCertificates[0].Subject.CommonName == "second.example"
 	}, time.Minute*8, time.Second)
 }