Difference between revisions of "Gatekeeper (Kubernetes)"

From wikieduonline
Jump to navigation Jump to search
 
(13 intermediate revisions by the same user not shown)
Line 4: Line 4:
  
 
== Errors ==
 
== Errors ==
[[Internal error occurred: failed calling webhook]] "xxxxx.sh": [[failed to call webhook]]: Post "https://gatekeeper-webhook-service.[[gatekeeper-system.svc]]:443/v1/[[admitlabel]]?timeout=3s": [[no endpoints available for service]] "[[gatekeeper-webhook-service]]"
+
* <code>[[Internal error occurred: failed calling webhook]]</code>
 +
* <code>[[no endpoints available for service]]</code>
  
 
+
  [[Error: waiting for EKS Add-On]] (yourcluster:[[coredns]]) create: unexpected state 'CREATE_FAILED', wanted target 'ACTIVE'. last error: :  
  Error: waiting for EKS Add-On (yourcluster:coredns) create: unexpected state 'CREATE_FAILED', wanted target 'ACTIVE'. last error: :  
+
  AdmissionRequestDenied: Internal error occurred: failed calling webhook "[[check-ignore-label.gatekeeper.sh]]": failed to call webhook:  
  AdmissionRequestDenied: Internal error occurred: failed calling webhook "check-ignore-label.gatekeeper.sh": failed to call webhook:  
 
 
  Post  
 
  Post  
  "https://gatekeeper-webhook-service.gatekeeper-system.svc:443/v1/admitlabel?timeout=3s": no endpoints available for service  
+
  "https://gatekeeper-webhook-service.gatekeeper-system.svc:443/v1/admitlabel?timeout=3s": [[no endpoints available for service]]
  "gatekeeper-  
+
  "[[gatekeeper-webhook-service]]"
webhook-service"
 
 
  │  
 
  │  
 
  │  with module.downstream-clusters-EKS.module.eks.aws_eks_addon.this["coredns"],
 
  │  with module.downstream-clusters-EKS.module.eks.aws_eks_addon.this["coredns"],
  │  on .terraform/modules/downstream-clusters-EKS.eks/main.tf line 390, in resource "aws_eks_addon" "this":
+
  │  on .terraform/modules/EKS.eks/main.tf line 390, in resource "[[aws_eks_addon]]" "this":
 
  │  390: resource "aws_eks_addon" "this" {
 
  │  390: resource "aws_eks_addon" "this" {
  
Line 22: Line 21:
 
* [[Open Policy Agent (OPA)]]
 
* [[Open Policy Agent (OPA)]]
 
* Helm: <code>[[ResourceQuota]], [[MutatingWebhookConfiguration]], [[ValidatingWebhookConfiguration]]</code>
 
* Helm: <code>[[ResourceQuota]], [[MutatingWebhookConfiguration]], [[ValidatingWebhookConfiguration]]</code>
 +
* [[Constraints]]
 +
* <code>[[gatekeeper-webhook-service]]</code>
 
* [[Gatekeeper]]
 
* [[Gatekeeper]]
 +
* [[Kubernetes Admission Controllers]]
  
 
== See also ==
 
== See also ==
 +
* {{gatekeeper.sh}}
 
* {{Gatekeeper}}
 
* {{Gatekeeper}}
 
* {{Kubernetes policies}}
 
* {{Kubernetes policies}}
 +
* {{OPA}}
 +
* {{K8s security}}
  
 
[[Category:Kubernetes]]
 
[[Category:Kubernetes]]

Latest revision as of 09:31, 5 March 2024

Gatekeeper policy library for Kubernetes

Errors[edit]

Error: waiting for EKS Add-On (yourcluster:coredns) create: unexpected state 'CREATE_FAILED', wanted target 'ACTIVE'. last error: : 
AdmissionRequestDenied: Internal error occurred: failed calling webhook "check-ignore-label.gatekeeper.sh": failed to call webhook: 
Post 
"https://gatekeeper-webhook-service.gatekeeper-system.svc:443/v1/admitlabel?timeout=3s": no endpoints available for service 
"gatekeeper-webhook-service"
│ 
│   with module.downstream-clusters-EKS.module.eks.aws_eks_addon.this["coredns"],
│   on .terraform/modules/EKS.eks/main.tf line 390, in resource "aws_eks_addon" "this":
│  390: resource "aws_eks_addon" "this" {

Related[edit]

See also[edit]

Advertising: