fix: disable handling update on pods (#619)

* fix: only mutate CREATE pods events * fix: add missing scope for webhook rule --------- Co-authored-by: Theron Voran <tvoran@users.noreply.github.com>
hashicorp · Jul 16, 2024 · 4583165 · 4583165
1 parent 11805d1
commit 4583165
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 2 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -1,5 +1,8 @@
 ## Unreleased
 
+Bugs:
+* Disable handling update on pods [GH-619](https://github.com/hashicorp/vault-k8s/pull/619)
+
 ## 1.4.2 (July 3, 2024)
 
 Changes:

diff --git a/deploy/injector-mutating-webhook.yaml b/deploy/injector-mutating-webhook.yaml
@@ -22,10 +22,11 @@ webhooks:
         namespace: "vault"
       caBundle: ""
     rules:
-      - operations: ["CREATE", "UPDATE"]
+      - operations: ["CREATE"]
         apiGroups: [""]
         apiVersions: ["v1"]
-        resources: ["deployments", "jobs", "pods", "statefulsets"]
+        resources: ["pods"]
+        scope: "Namespaced"
     namespaceSelector: {}
     objectSelector:
       matchExpressions: