mirror of https://github.com/k3s-io/k3s
09702160b0
Automatic merge from submit-queue (batch tested with PRs 46681, 46786, 46264, 46680, 46805) Add annotation for image policy webhook fail open. **What this PR does / why we need it**: there's no good way to audit log if binary verification fails open. Adding an annotation can solve that, and provide a useful tool to audit [non-malicious] containers. **Release note**: add the annotation "alpha.image-policy.k8s.io/failed-open=true" to pods created when the image policy webhook fails open. ```release-note Add the `alpha.image-policy.k8s.io/failed-open=true` annotation when the image policy webhook encounters an error and fails open. ``` |
||
|---|---|---|
| .. | ||
| cmd/kube-scheduler | ||
| pkg | ||
| BUILD | ||
| OWNERS | ||