Skip to content
This repository has been archived by the owner on Sep 26, 2023. It is now read-only.

openshift-multus: admission webhook "check-ignore-label.gatekeeper.sh" denied #238

Open
laurobmb opened this issue Jul 7, 2022 · 0 comments

Comments

@laurobmb
Copy link

laurobmb commented Jul 7, 2022

Hey,
after installing gatekeeper operator on openshift cluster it gives an error in operator do network

oc describe co network
Message: Error while updating operator configuration: could not apply (/v1, Kind=Namespace) /openshift-multus: could not update object (/v1, Kind=Namespace) /openshift-multus: admission webhook "check-ignore-label.gatekeeper.sh" denied the request: Only exempt namespace can have the admission.gatekeeper.sh/ignore label

I noticed that the ValidatingWebhookConfiguration/gatekeeper-validating-webhook-configuration feature doesn't have matchExpressions to ignore the label, is that right? because I solved the problem by applying a change to the resource putting the
"matchExpressions": [
{
"key": "admission.gatekeeper.sh/ignore",
"operator": "DoesNotExist"
in the resource

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant