From 3517e866023c1c2abbb5539172284760a1aa5fdc Mon Sep 17 00:00:00 2001 From: yoobinshin Date: Mon, 27 Oct 2025 20:17:31 -0400 Subject: [PATCH] allow-list acsServices username in vap --- pkg/webhook/managedresource/validatingadmissionpolicy.go | 1 + 1 file changed, 1 insertion(+) diff --git a/pkg/webhook/managedresource/validatingadmissionpolicy.go b/pkg/webhook/managedresource/validatingadmissionpolicy.go index 80ba75979..2c14fe56a 100644 --- a/pkg/webhook/managedresource/validatingadmissionpolicy.go +++ b/pkg/webhook/managedresource/validatingadmissionpolicy.go @@ -57,6 +57,7 @@ func mutateValidatingAdmissionPolicy(vap *admv1.ValidatingAdmissionPolicy) { ( ( request.userInfo.username == "aksService" || + request.userInfo.username == "acsService" || request.userInfo.username == "fleet-member-agent-sa" ) &&