disable generic admission control for apiserver objects

zalando-incubator · Nov 13, 2024 · 9024df4 · 9024df4
1 parent a6bb1bb
commit 9024df4
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/cluster/manifests/02-admission-control/teapot.yaml b/cluster/manifests/02-admission-control/teapot.yaml
@@ -508,6 +508,9 @@ webhooks:
         - key: component
           operator: NotIn
           values: ["admission-controller"]
+        - key: apiserver.kubernetes.io/identity
+          operator: NotIn
+          values: ["kube-apiserver"]
     {{- end }}
     rules:
       - operations: [ "*" ]