Juju 2.8 creates admission webhook without dry run support

Bug #1869959 reported by Kenneth Koski
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Canonical Juju
Fix Released
High
Harry Pidcock

Bug Description

I've got a charm that spins up Istio, which does some validation of existing infrastructure while booting up. The admission webhook that Juju creates causes istio-pilot to not finish setting up properly, and logs these lines repeatedly:

2020-03-31T20:32:41.483291Z info validationController Reconcile(enter): retry dry-run creation of invalid config
2020-03-31T20:32:41.484509Z info validationController Not ready to switch validation to fail-closed: dummy invalid rejected for the wrong reason: admission webhook "admission.juju.is" does not support dry run

It looks like if Juju's admission webhook supported dry runs, this issue would go away.

Tags: k8s
Ian Booth (wallyworld)
Changed in juju:
milestone: none → 2.8-beta1
status: New → Triaged
tags: added: k8s
Changed in juju:
importance: Undecided → High
assignee: nobody → Yang Kelvin Liu (kelvin.liu)
Revision history for this message
Yang Kelvin Liu (kelvin.liu) wrote :

Hi Kenneth,
I deployed https://github.com/juju-solutions/bundle-istio but wasn't able to reproduce this issue.
Would you give some reproduce steps?

Thanks

Revision history for this message
Ian Booth (wallyworld) wrote :

Marking as Incomplete but we can adjust once we are able to figure out how to reproduce.

Changed in juju:
status: Triaged → Incomplete
Changed in juju:
milestone: 2.8-beta1 → 2.8-rc1
Harry Pidcock (hpidcock)
Changed in juju:
status: Incomplete → In Progress
assignee: Yang Kelvin Liu (kelvin.liu) → Harry Pidcock (hpidcock)
Revision history for this message
Harry Pidcock (hpidcock) wrote :
Harry Pidcock (hpidcock)
Changed in juju:
status: In Progress → Fix Committed
Harry Pidcock (hpidcock)
Changed in juju:
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.