Skip to content

[main] bypass read only settings for rancher service account - #1765

Open
joshmeranda wants to merge 3 commits into
rancher:mainfrom
joshmeranda:bypass-readonly
Open

[main] bypass read only settings for rancher service account#1765
joshmeranda wants to merge 3 commits into
rancher:mainfrom
joshmeranda:bypass-readonly

Conversation

@joshmeranda

@joshmeranda joshmeranda commented Aug 14, 2026

Copy link
Copy Markdown
Contributor

Forwardport Issue rancher/rancher#56718

original Issue: rancher/rancher#56522

Problem

Some settings, like cacerts, are considered read only and all updates to them are rejected. When users want to update their rancher deployment to use different cacerts, webhook will reject the update requests sent by rancher during startup and cause rancher to fail.

Solution

Allow updates updates coming directly from the Rancher serviceaccount.

CheckList

  • Test

@joshmeranda
joshmeranda requested a review from a team as a code owner August 14, 2026 01:42
@joshmeranda
joshmeranda force-pushed the bypass-readonly branch 3 times, most recently from 91c3a4c to 1a8481b Compare August 14, 2026 02:05

@crobby crobby left a comment

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The code itself looks good to me. We should probably update the validator docs to include this change in behavior.

@crobby
crobby requested a review from a team August 14, 2026 10:40
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants