Can anyone tell me how Kubernetes orders mutating admission webhooks on the same resource? I’m concerned the validation capabilities are an antipattern because things could change before reaching etcd 
. cc @bgrant0607
Show this thread
-
I'm referring to: "However, even a mutating admission webhook can reject requests and thus act in a validating fashion." From:https://kubernetes.io/blog/2019/03/21/a-guide-to-kubernetes-admission-controllers …
Show this thread
If you want validation, use a validating webhook, which will run after mutating ones
