When inject-waf-attachment: "true" is enabled, deleting the open-appsec-injector-webhook Pod prevents it from being recreated.
The webhook Pod also depends on itself, which is unavailable while the Pod is down. As a result, Kubernetes cannot create a replacement Pod.
This makes the webhook deployment vulnerable to failures and prevents automatic recovery.
When
inject-waf-attachment: "true"is enabled, deleting theopen-appsec-injector-webhookPod prevents it from being recreated.The webhook Pod also depends on itself, which is unavailable while the Pod is down. As a result, Kubernetes cannot create a replacement Pod.
This makes the webhook deployment vulnerable to failures and prevents automatic recovery.