fix: allow-list acsService username in validating admission webhook (#1215)

nibooy · web-flow · commit 00397b67b685 · 2025-10-27T21:45:52.000-04:00
diff --git a/pkg/webhook/managedresource/validatingadmissionpolicy.go b/pkg/webhook/managedresource/validatingadmissionpolicy.go
@@ -57,6 +57,7 @@ func mutateValidatingAdmissionPolicy(vap *admv1.ValidatingAdmissionPolicy) {
 				(
 					(
 						request.userInfo.username == "aksService" ||
+						request.userInfo.username == "acsService" ||
 						request.userInfo.username == "fleet-member-agent-sa"
 					)
 				    &&

Original file line number	Diff line number	Diff line change
`@@ -57,6 +57,7 @@ func mutateValidatingAdmissionPolicy(vap *admv1.ValidatingAdmissionPolicy) {`
`57`	`57`	`(`
`58`	`58`	`(`
`59`	`59`	`request.userInfo.username == "aksService" \|\|`
	`60`	`+ request.userInfo.username == "acsService" \|\|`
`60`	`61`	`request.userInfo.username == "fleet-member-agent-sa"`
`61`	`62`	`)`
`62`	`63`	`&&`