Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Ingress from KubeAPI network policies cause auto-update issues on 0.32.1 #1101

Closed
mjnagel opened this issue Dec 6, 2024 · 3 comments · Fixed by #1097
Closed

Ingress from KubeAPI network policies cause auto-update issues on 0.32.1 #1101

mjnagel opened this issue Dec 6, 2024 · 3 comments · Fixed by #1097
Assignees

Comments

@mjnagel
Copy link
Contributor

mjnagel commented Dec 6, 2024

The current code for updating KubeAPI netpols does not account for policies that do not have an egress block (i.e. ingress only policies). The lack of safety around the init code in particular results in crashes of the Pepr pods when an ingress policy is present.

@mjnagel
Copy link
Contributor Author

mjnagel commented Dec 6, 2024

An example policy that would cause this failure:

      - direction: Ingress
        selector:
          app.kubernetes.io/component: webhook
        remoteGenerated: KubeAPI

@mjnagel
Copy link
Contributor Author

mjnagel commented Dec 6, 2024

Scraped the code across the org and I believe this will affect the following packages:

  • kuberay
  • cert-manager
  • k8sgpt-operator

@mjnagel
Copy link
Contributor Author

mjnagel commented Dec 10, 2024

Still working this due an issue on the upgrade. It seems unrelated to the changes in the PR, but Loki is intermittently having issues with querying.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging a pull request may close this issue.

1 participant