diff --git a/CHANGELOG.md b/CHANGELOG.md index 171543eb..6924b56f 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,5 +1,8 @@ ## Unreleased +Bugs: +* Disable handling update on pods [GH-619](https://github.com/hashicorp/vault-k8s/pull/619) + ## 1.4.2 (July 3, 2024) Changes: diff --git a/deploy/injector-mutating-webhook.yaml b/deploy/injector-mutating-webhook.yaml index e5de99fd..2e902679 100644 --- a/deploy/injector-mutating-webhook.yaml +++ b/deploy/injector-mutating-webhook.yaml @@ -22,10 +22,11 @@ webhooks: namespace: "vault" caBundle: "" rules: - - operations: ["CREATE", "UPDATE"] + - operations: ["CREATE"] apiGroups: [""] apiVersions: ["v1"] - resources: ["deployments", "jobs", "pods", "statefulsets"] + resources: ["pods"] + scope: "Namespaced" namespaceSelector: {} objectSelector: matchExpressions: