DEV Community

Discussion on: Writing a very basic kubernetes mutating admission webhook

 
nrobert13 profile image
Robert Nemeti

I tried without caBundle, but it doesn't work, it is complaining about unknown certificate. I thought maybe you know why ....

Thread Thread
 
ineedale profile image
Alex Leonhardt

Hmm.. potentially something to do with the api server "client" portion not trusting its own (k8s) CA - just like curl, I'm pretty sure it'll use whatever system CAs are installed by default (ca-certs package?);

I've not further looked into this so cannot really help too much, but I'd check if the API servers own CAs are actually configured to be trusted when the api server is "the client".

Sorry if I cannot be more of help, but short of knowing what your setup is and how things are configured, I don't think I can help much more here.