New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Fix Cedar Webhook startup issue: Add init container for certs permissions #10

Open

ad1mohan wants to merge 1 commit into awslabs:main from ad1mohan:fix-cedar-webhook-init-container

ad1mohan commented Feb 9, 2025

Description of Changes

Adds an initContainer to manifests/cedar-authorization-webhook.yaml to handle permission adjustments for /cedar-authorizer/certs/.
The init container runs before the main cedar-webhook container, ensuring the correct ownership and permissions for the certs directory.
This prevents the API server from failing due to missing or inaccessible certificates.

Issue #9

Fixes #9 where cedar-webhook fails to generate certificates due to permission errors and local cluster creation fails.

Testing

Successfully tested with make kind, verified that the webhook starts correctly.
Examined pod logs to confirm the init container correctly modifies cert directory permissions.
Confirmed that the API server no longer fails due to certificate access issues.


          Fix Cedar Webhook startup issue: Add init container for certs permiss…

c2748d2

…ions

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet