kubernetes/docs/api-reference
Kubernetes Submit Queue 5066a67caa
Merge pull request #59840 from jennybuckley/webhooks-on-webhooks
Automatic merge from submit-queue. If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>.

Prevent webhooks from affecting admission requests for WebhookConfiguration objects

**What this PR does / why we need it**:
As it stands now webhooks can be added to the system which make it impossible for a user to remove that webhook, or two webhooks could be registered which make it impossible to remove each other.

The first commit of this will add a test to make sure webhook deletion is never blocked by a webhook. This test will fail until the second commit is added which will prevent webhooks from affecting admission requests for ValidatingWebhookConfiguration and MutatingWebhookConfiguration objects in the admissionregistration.k8s.io group

- [x] Test that webhook deletion is never blocked by a webhook ([test fails before second commit](https://k8s-gubernator.appspot.com/build/kubernetes-jenkins/pr-logs/pull/59840/pull-kubernetes-e2e-gce/23731/))
- [x] Prevent webhooks from being called on admission requests for [Validating|Mutating]WebhookConfiguration objects
- [x] Document this new behavior maybe in another PR

**Which issue(s) this PR fixes** *(optional, in `fixes #<issue number>(, fixes #<issue_number>, ...)` format, will close the issue(s) when PR gets merged)*:
Part of fixing #59124 (Verifies that it can remove the broken webhook.)

**Release note**:
```release-note
ValidatingWebhooks and MutatingWebhooks will not be called on admission requests for ValidatingWebhookConfiguration and MutatingWebhookConfiguration objects in the admissionregistration.k8s.io group
```
2018-03-05 19:09:33 -08:00
..
admissionregistration.k8s.io Run hack/update-all.sh 2018-03-05 16:36:11 -08:00
apps API Changes for RunAsGroup and Implementation and e2e 2018-02-28 22:09:56 -08:00
authentication.k8s.io Update deletionTimestamp with information about finalizer effect 2017-11-03 10:48:48 +08:00
authorization.k8s.io autogenerated 2017-11-03 13:46:29 -07:00
autoscaling Autogenerated code for HPA external metrics 2018-02-22 14:45:06 +01:00
batch API Changes for RunAsGroup and Implementation and e2e 2018-02-28 22:09:56 -08:00
certificates.k8s.io/v1beta1 Clarify that ListOptions.Timeout is not conditional on inactivity 2018-02-05 17:04:03 -05:00
events.k8s.io/v1beta1 fix all the typos across the project 2018-02-11 11:04:14 +08:00
extensions/v1beta1 API Changes for RunAsGroup and Implementation and e2e 2018-02-28 22:09:56 -08:00
networking.k8s.io/v1 Clarify that ListOptions.Timeout is not conditional on inactivity 2018-02-05 17:04:03 -05:00
policy/v1beta1 Update generated files. 2018-02-19 20:14:28 +01:00
rbac.authorization.k8s.io Clarify that ListOptions.Timeout is not conditional on inactivity 2018-02-05 17:04:03 -05:00
scheduling.k8s.io/v1alpha1 autogenerated files 2018-02-18 18:20:10 -08:00
settings.k8s.io/v1alpha1 auto-generated 2018-02-11 11:04:15 +08:00
storage.k8s.io Clarify that ListOptions.Timeout is not conditional on inactivity 2018-02-05 17:04:03 -05:00
v1 API Changes for RunAsGroup and Implementation and e2e 2018-02-28 22:09:56 -08:00
OWNERS Create api-{approvers,reviewers} alias 2017-10-18 10:54:28 -07:00