mirror of
https://github.com/open-policy-agent/opa.git
synced 2026-08-13 03:42:35 -06:00
Rafael Fernández López
581ba9c456
* documentation: always return the `uid` to the Kubernetes apiserver The Kubernetes API server will reject the answer from any webhook that does not contain the `uid` present in the request [1]. Failing to do so will not only result in a warning, but in the answer from the webhook being ignored, and the request rejected [2]. [1] https://github.com/kubernetes/apiserver/blob/464eee4062a8f21f785e657b32b83f19d693af8d/pkg/admission/plugin/webhook/request/admissionreview.go#L52-L55 [2] https://github.com/kubernetes/apiserver/blob/464eee4062a8f21f785e657b32b83f19d693af8d/pkg/admission/plugin/webhook/validating/dispatcher.go#L236-L239 * documentation: rename `reason` to `message` on certain objects When the object refers to an `AdmissionReview` from Kubernetes, what OPA calls the `reason` is the `message` field. * documentation: create `opa-server` secret in the `opa` namspace Signed-off-by: Rafael Fernández López <rfernandezlopez@suse.com>