Skip to content

[release-1.27] Fix infinite reconciliation on webhook resources#1656

Merged
istio-testing merged 1 commit intoistio-ecosystem:release-1.27from
istio-testing:cherry-pick-1651-to-release-1.27
Mar 9, 2026
Merged

[release-1.27] Fix infinite reconciliation on webhook resources#1656
istio-testing merged 1 commit intoistio-ecosystem:release-1.27from
istio-testing:cherry-pick-1651-to-release-1.27

Conversation

@istio-testing
Copy link
Copy Markdown
Collaborator

@istio-testing istio-testing commented Mar 6, 2026

This is an automated cherry-pick of #1651

@dgn @istio-testing
Fix infinite reconciliation on webhook resources
6c00218 
istiod updates the CABundle and FailurePolicy on its
ValidatingWebhookConfigurations and MutatingWebhookConfigurations. The
controller needs to ignore those changes to avoid continuous
reconciliation of the control plane.

Signed-off-by: Daniel Grimm <dgrimm@redhat.com>
@istio-testing istio-testing requested a review from a team as a code owner March 6, 2026 16:31
@istio-testing istio-testing mentioned this pull request Mar 6, 2026
Merged
@codecov
Copy link
Copy Markdown

codecov bot commented Mar 6, 2026 •
edited
Loading

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 80.68%. Comparing base (60a7a55) to head (6c00218).
⚠️ Report is 1 commits behind head on release-1.27.

Additional details and impacted files 
@@               Coverage Diff                @@
##           release-1.27    #1656      +/-   ##
================================================
+ Coverage         80.55%   80.68%   +0.12%     
================================================
  Files                44       44              
  Lines              2299     2304       +5     
================================================
+ Hits               1852     1859       +7     
  Misses              327      327              
+ Partials            120      118       -2

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@istio-testing istio-testing merged commit 45b5b58 into istio-ecosystem:release-1.27 Mar 9, 2026
18 checks passed
openshift-service-mesh-bot pushed a commit to openshift-service-mesh-bot/sail-operator that referenced this pull request Mar 9, 2026
Automated merge
d538c7c 
* upstream/release-1.27:
  Fix infinite reconciliation on webhook resources (istio-ecosystem#1656)
openshift-service-mesh-bot pushed a commit to openshift-service-mesh-bot/sail-operator that referenced this pull request Mar 9, 2026
Automated merge
c073ee7 
* upstream/release-1.27:
  Fix infinite reconciliation on webhook resources (istio-ecosystem#1656)
openshift-service-mesh-bot pushed a commit to openshift-service-mesh-bot/sail-operator that referenced this pull request Mar 9, 2026
Automated merge
f668cda 
* upstream/release-1.27:
  Fix infinite reconciliation on webhook resources (istio-ecosystem#1656)
openshift-service-mesh-bot pushed a commit to openshift-service-mesh-bot/sail-operator that referenced this pull request Mar 9, 2026
Automated merge
85ffebe 
* upstream/release-1.27:
  Fix infinite reconciliation on webhook resources (istio-ecosystem#1656)
openshift-service-mesh-bot pushed a commit to openshift-service-mesh-bot/sail-operator that referenced this pull request Mar 10, 2026
Automated merge
42b7e79 
* upstream/release-1.27:
  Fix infinite reconciliation on webhook resources (istio-ecosystem#1656)
openshift-service-mesh-bot pushed a commit to openshift-service-mesh-bot/sail-operator that referenced this pull request Mar 10, 2026
Automated merge
a367f8e 
* upstream/release-1.27:
  Fix infinite reconciliation on webhook resources (istio-ecosystem#1656)
openshift-service-mesh-bot pushed a commit to openshift-service-mesh-bot/sail-operator that referenced this pull request Mar 10, 2026
Automated merge
f559363 
* upstream/release-1.27:
  Fix infinite reconciliation on webhook resources (istio-ecosystem#1656)
openshift-service-mesh-bot pushed a commit to openshift-service-mesh-bot/sail-operator that referenced this pull request Mar 10, 2026
Automated merge
2893922 
* upstream/release-1.27:
  Fix infinite reconciliation on webhook resources (istio-ecosystem#1656)
openshift-service-mesh-bot pushed a commit to openshift-service-mesh-bot/sail-operator that referenced this pull request Mar 10, 2026
Automated merge
0269a5d 
* upstream/release-1.27:
  Fix infinite reconciliation on webhook resources (istio-ecosystem#1656)
openshift-service-mesh-bot pushed a commit to openshift-service-mesh-bot/sail-operator that referenced this pull request Mar 11, 2026
Automated merge
f7b5295 
* upstream/release-1.27:
  Fix infinite reconciliation on webhook resources (istio-ecosystem#1656)
openshift-service-mesh-bot pushed a commit to openshift-service-mesh-bot/sail-operator that referenced this pull request Mar 11, 2026
Automated merge
bedb770 
* upstream/release-1.27:
  Release 1.27 add 1278 (istio-ecosystem#1677)
  Fix infinite reconciliation on webhook resources (istio-ecosystem#1656)

# Conflicts:
#	bundle/manifests/sailoperator.clusterserviceversion.yaml
openshift-service-mesh-bot pushed a commit to openshift-service-mesh-bot/sail-operator that referenced this pull request Mar 11, 2026
Automated merge
20bc13f 
* upstream/release-1.27:
  Release 1.27 add 1278 (istio-ecosystem#1677)
  Fix infinite reconciliation on webhook resources (istio-ecosystem#1656)

# Conflicts:
#	bundle/manifests/sailoperator.clusterserviceversion.yaml
openshift-service-mesh-bot pushed a commit to openshift-service-mesh-bot/sail-operator that referenced this pull request Mar 11, 2026
Automated merge
fa62069 
* upstream/release-1.27:
  Release 1.27 add 1278 (istio-ecosystem#1677)
  Fix infinite reconciliation on webhook resources (istio-ecosystem#1656)

# Conflicts:
#	bundle/manifests/sailoperator.clusterserviceversion.yaml
openshift-service-mesh-bot pushed a commit to openshift-service-mesh-bot/sail-operator that referenced this pull request Mar 11, 2026
Automated merge
f2ecbac 
* upstream/release-1.27:
  Release 1.27 add 1278 (istio-ecosystem#1677)
  Fix infinite reconciliation on webhook resources (istio-ecosystem#1656)

# Conflicts:
#	bundle/manifests/sailoperator.clusterserviceversion.yaml
openshift-service-mesh-bot pushed a commit to openshift-service-mesh-bot/sail-operator that referenced this pull request Mar 12, 2026
Automated merge
1ccae67 
* upstream/release-1.27:
  Release 1.27 add 1278 (istio-ecosystem#1677)
  Fix infinite reconciliation on webhook resources (istio-ecosystem#1656)

# Conflicts:
#	bundle/manifests/sailoperator.clusterserviceversion.yaml
openshift-service-mesh-bot pushed a commit to openshift-service-mesh-bot/sail-operator that referenced this pull request Mar 12, 2026
Automated merge
592923a 
* upstream/release-1.27:
  Release 1.27 add 1278 (istio-ecosystem#1677)
  Fix infinite reconciliation on webhook resources (istio-ecosystem#1656)

# Conflicts:
#	bundle/manifests/sailoperator.clusterserviceversion.yaml
openshift-service-mesh-bot pushed a commit to openshift-service-mesh-bot/sail-operator that referenced this pull request Mar 12, 2026
Automated merge
07fb1fc 
* upstream/release-1.27:
  Release 1.27 add 1278 (istio-ecosystem#1677)
  Fix infinite reconciliation on webhook resources (istio-ecosystem#1656)

# Conflicts:
#	bundle/manifests/sailoperator.clusterserviceversion.yaml
openshift-service-mesh-bot pushed a commit to openshift-service-mesh-bot/sail-operator that referenced this pull request Mar 12, 2026
Automated merge
3adb117 
* upstream/release-1.27:
  Release 1.27 add 1278 (istio-ecosystem#1677)
  Fix infinite reconciliation on webhook resources (istio-ecosystem#1656)

# Conflicts:
#	bundle/manifests/sailoperator.clusterserviceversion.yaml
openshift-service-mesh-bot pushed a commit to openshift-service-mesh-bot/sail-operator that referenced this pull request Mar 12, 2026
Automated merge
5c27f47 
* upstream/release-1.27:
  Release 1.27 add 1278 (istio-ecosystem#1677)
  Fix infinite reconciliation on webhook resources (istio-ecosystem#1656)

# Conflicts:
#	bundle/manifests/sailoperator.clusterserviceversion.yaml
openshift-service-mesh-bot pushed a commit to openshift-service-mesh-bot/sail-operator that referenced this pull request Mar 13, 2026
Automated merge
322eebe 
* upstream/release-1.27:
  Release 1.27 add 1278 (istio-ecosystem#1677)
  Fix infinite reconciliation on webhook resources (istio-ecosystem#1656)

# Conflicts:
#	bundle/manifests/sailoperator.clusterserviceversion.yaml
openshift-service-mesh-bot pushed a commit to openshift-service-mesh-bot/sail-operator that referenced this pull request Mar 13, 2026
Automated merge
99de217 
* upstream/release-1.27:
  Release 1.27 add 1278 (istio-ecosystem#1677)
  Fix infinite reconciliation on webhook resources (istio-ecosystem#1656)

# Conflicts:
#	bundle/manifests/sailoperator.clusterserviceversion.yaml
openshift-service-mesh-bot pushed a commit to openshift-service-mesh-bot/sail-operator that referenced this pull request Mar 13, 2026
Automated merge
0ef7d62 
* upstream/release-1.27:
  Release 1.27 add 1278 (istio-ecosystem#1677)
  Fix infinite reconciliation on webhook resources (istio-ecosystem#1656)

# Conflicts:
#	bundle/manifests/sailoperator.clusterserviceversion.yaml
openshift-service-mesh-bot pushed a commit to openshift-service-mesh-bot/sail-operator that referenced this pull request Mar 13, 2026
Automated merge
dcdb0b8 
* upstream/release-1.27:
  Release 1.27 add 1278 (istio-ecosystem#1677)
  Fix infinite reconciliation on webhook resources (istio-ecosystem#1656)

# Conflicts:
#	bundle/manifests/sailoperator.clusterserviceversion.yaml
openshift-service-mesh-bot pushed a commit to openshift-service-mesh-bot/sail-operator that referenced this pull request Mar 13, 2026
Automated merge
ecaf5e5 
* upstream/release-1.27:
  Release 1.27 add 1278 (istio-ecosystem#1677)
  Fix infinite reconciliation on webhook resources (istio-ecosystem#1656)

# Conflicts:
#	bundle/manifests/sailoperator.clusterserviceversion.yaml
openshift-service-mesh-bot pushed a commit to openshift-service-mesh-bot/sail-operator that referenced this pull request Mar 16, 2026
Automated merge
5d1b94a 
* upstream/release-1.27:
  Release 1.27 add 1278 (istio-ecosystem#1677)
  Fix infinite reconciliation on webhook resources (istio-ecosystem#1656)

# Conflicts:
#	bundle/manifests/sailoperator.clusterserviceversion.yaml
openshift-service-mesh-bot pushed a commit to openshift-service-mesh-bot/sail-operator that referenced this pull request Mar 16, 2026
Automated merge
672f347 
* upstream/release-1.27:
  fix: write correct helm value for FIPS-140-2 support (istio-ecosystem#1694)
  Release 1.27 add 1278 (istio-ecosystem#1677)
  Fix infinite reconciliation on webhook resources (istio-ecosystem#1656)

# Conflicts:
#	bundle/manifests/sailoperator.clusterserviceversion.yaml
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@dgn dgn dgn approved these changes

Assignees

No one assigned

Labels

release-notes-none size/M

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@istio-testing @dgn