Urgent.News

What's breaking now, across thousands of outlets.

More in Tech

When the mesh fights Kubernetes: a webhook deadlock, a probe loop, and what it costs

In part 1 , we rigged the network so every packet in the pod passes through Ananse's sidecar, without the app knowing. That was the plan on paper.

  • Mutating Admission Webhook injects init container and sidecar into pods
  • FailurePolicy of Fail rejects pod creation if webhook is unreachable
  • NamespaceSelector excludes critical namespaces from injection

More from Friday 6 November →