admissionController-failurePolicy does not take effect in cluster

[FloatXD]

‘’‘
[root@k8s-master ~]# kubectl get MutatingWebhookconfiguration -o yaml
apiVersion: v1
items:

• apiVersion: admissionregistration.k8s.io/v1
  kind: MutatingWebhookConfiguration
  metadata:
  creationTimestamp: "2024-09-23T02:45:54Z"
  generation: 1
  name: hwameistor-admission-mutate
  resourceVersion: "12656"
  uid: 5a2b8346-d6b4-4af2-a667-f13ef519a228
  webhooks:
  • admissionReviewVersions:
    • v1
    • v1beta1
      clientConfig:
      caBundle: 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
      service:
      name: hwameistor-admission-controller
      namespace: hwameistor
      path: /mutate
      port: 443
      failurePolicy: Ignore
      matchPolicy: Equivalent
      name: hwameistor.io.mutate-hook
      namespaceSelector:
      matchExpressions:
      • key: hwameistor.io/webhook
        operator: NotIn
        values:
        • ignore
          objectSelector: {}
          reinvocationPolicy: Never
          rules:
    • apiGroups:
      • apps
      • ""
        apiVersions:
      • v1
        operations:
      • CREATE
        resources:
      • pods
        scope: '*'
        sideEffects: None
        timeoutSeconds: 10
        kind: List
        metadata:
        resourceVersion: ""
        ’‘’

’‘’
[root@k8s-master ~]# kubectl get cluster hwameistor-cluster -o yaml
apiVersion: hwameistor.io/v1alpha1
kind: Cluster
metadata:
annotations:
meta.helm.sh/release-name: hwameistor-operator
meta.helm.sh/release-namespace: hwameistor
creationTimestamp: "2024-09-23T02:37:35Z"
generation: 2
labels:
app.kubernetes.io/managed-by: Helm
name: hwameistor-cluster
resourceVersion: "20064"
uid: 9afe3750-0fa5-40d5-bd1e-8351199b6ea7
spec:
admissionController:
controller:
image:
registry: ghcr.io
repository: hwameistor/admission
tag: v0.14.7
disable: false
failurePolicy: Fail
replicas: 1
’‘’