Skip to content

Injector webhook cannot recover when its own pod is dead. #72

Description

@jclab-joseph

When inject-waf-attachment: "true" is enabled, deleting the open-appsec-injector-webhook Pod prevents it from being recreated.

The webhook Pod also depends on itself, which is unavailable while the Pod is down. As a result, Kubernetes cannot create a replacement Pod.

This makes the webhook deployment vulnerable to failures and prevents automatic recovery.

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions