简体   繁体   中英

How do I debug a Kubernetes validating admission webhook?

I have a webhook running as a service in cluster, I have a valid ValidatingWebhookConfiguration defined for it:

    apiVersion: admissionregistration.k8s.io/v1beta1
    kind: ValidatingWebhookConfiguration
    metadata:
      name: ingress-check-webhook-cfg
    webhooks:
      - name: ingress.check.webhook
        rules:
          - apiGroups:
              - extensions
            apiVersions:
              - v1
            operations:
              - CREATE
              - UPDATE
            resources:
              - ingresses
        failurePolicy: Ignore
        clientConfig:
          service:
            name: ingress-check-webhook-svc
            namespace: operations
            path: "/validate"
          caBundle: <cert stuff>

I can curl -k https://ingress-check-webhook-svc.operations/validate within the cluster and see log entries in my webhook service but when I create a new ingress I get nothing. I can't seem to find any logs for the admission process - where is this logged, what else can I do?

deleting and re-creating the config seems to have fixed my issue. Maybe I didn't apply the api version change correctly. Note kubectl describe kubectl get events and checking api logs didn't provide anything useful.

The technical post webpages of this site follow the CC BY-SA 4.0 protocol. If you need to reprint, please indicate the site URL or the original address.Any question please contact:yoyou2525@163.com.

 
粤ICP备18138465号  © 2020-2024 STACKOOM.COM