The set of resources and HTTP methods that KubePlus intercepts as part of its mutating webhook are defined here:
https://github.com/cloud-ark/kubeplus/blob/master/deploy/mutatingwebhook.yaml
We should revisit this list and make sure we are not intercepting more resources than are necessary. For example, now that we have deprecated Pod-level policies (#1367), there is no reason to intercept Pod resource.
Do we need to intercept CREATE calls for resources in the following api groups:
"apps", "extensions", "", "apiextensions.k8s.io",?
The set of resources and HTTP methods that KubePlus intercepts as part of its mutating webhook are defined here:
https://github.com/cloud-ark/kubeplus/blob/master/deploy/mutatingwebhook.yaml
We should revisit this list and make sure we are not intercepting more resources than are necessary. For example, now that we have deprecated Pod-level policies (#1367), there is no reason to intercept Pod resource.
Do we need to intercept CREATE calls for resources in the following api groups:
"apps", "extensions", "", "apiextensions.k8s.io",?