UNCLASSIFIED - NO CUI

Monitoring admission webhook patch uses deprecated API Versions

This is the job that causes issues - https://repo1.dso.mil/platform-one/big-bang/apps/core/monitoring/-/blob/main/chart/templates/prometheus-operator/admission-webhooks/job-patch/job-patchWebhook.yaml

https://github.com/jet/kube-webhook-certgen/issues/30 - this is an open issue for the image currently being used (see here.

Upstream has switched to a new image for the certgen - https://github.com/prometheus-community/helm-charts/blob/main/charts/kube-prometheus-stack/values.yaml#L1380 - which does not have this issue.

New image repo: https://github.com/kubernetes/ingress-nginx/tree/main/images/kube-webhook-certgen

New image name: k8s.gcr.io/ingress-nginx/kube-webhook-certgen

AC:

  • IB image request submitted for k8s.gcr.io/ingress-nginx/kube-webhook-certgen
  • New image available in IB and swapped in as the default image for the patchWebhook job
Edited by Micah Nagel