排查
排查
kubectl get validatingwebhookconfigurations,mutatingwebhookconfigurations
kubectl get svc -n webhook-system
kubectl get endpoints -n webhook-system webhook-svc
kubectl describe validatingwebhookconfiguration my-policy | tail -20典型报错
典型报错
Error from server: error when creating "pod.yaml": admission webhook
"validate.example.com" denied the request: ...
(或) failed calling webhook ...: Post "https://...:443/validate": dial tcp ...: connect: connection refusedfailurePolicy=Fail 时 Webhook 不可用会阻塞写入，Ignore 则放行但失去校验；变更策略前先评估这两者的影响。