NVIDIA / skyhook / 21848362404

81%

Build Type

push

github

Committed by lockwobr

Commit Message

fix: resolve webhook caBundle deadlock during helm upgrade

During helm upgrade, the webhook configurations' caBundle field was
reset to empty, causing new pods to fail readiness checks while the
old leader pod never detected the change (only watched the cert
Secret, with a 24h requeue). This created a deadlock where no pod
could fix the caBundle.

- Watch ValidatingWebhookConfiguration and MutatingWebhookConfiguration
  so the leader detects caBundle changes immediately
- Use bytes.Equal for caBundle comparison instead of len==0 so stale
  values are corrected, not just empty ones
- Remove caBundle from Helm webhook templates so upgrades stop
  resetting operator-managed values

Run Details

4 of 15 new or added lines in 1 file covered. (26.67%)

4 existing lines in 1 file now uncovered.

6817 of 8446 relevant lines covered (80.71%)

4.27 hits per line