-
|
I created ArgoCD Application definition based on sample here - https://github.com/linkerd/linkerd-examples/blob/master/gitops/argo-apps/linkerd-control-plane.yaml with small changes related to argo project and target revision as I updated it to 1.9.6. After syncing Application it immediately reports webhook configurations as OutOfSync: After looking at diff, I can see in the live manifest there is an additional matchExpression in namespaceSelectors block, yet I am not sure who adds it: Looking at the linkerd control-plane helm chart (https://github.com/linkerd/linkerd2/blob/main/charts/linkerd-control-plane/values.yaml#L343) this namespace selector indeed is not defined in the source code yet something injects it. Do you have any ideas? |
Beta Was this translation helpful? Give feedback.
Replies: 1 comment
-
|
After digging a little bit more it looks like AKS is mutating these webhooks and adds this specific matchExpression to skip mutating AKS internal namespaces - https://learn.microsoft.com/en-us/azure/aks/faq#can-admission-controller-webhooks-impact-kube-system-and-internal-aks-namespaces |
Beta Was this translation helpful? Give feedback.
After digging a little bit more it looks like AKS is mutating these webhooks and adds this specific matchExpression to skip mutating AKS internal namespaces - https://learn.microsoft.com/en-us/azure/aks/faq#can-admission-controller-webhooks-impact-kube-system-and-internal-aks-namespaces