Bug ID 1355237: CRD Conversion Webhook does not function properly when it is installed in non-default namespace

Last Modified: Oct 19, 2025

Affected Product(s):
BIG_IP_NEXT(SPK) SPK(all modules)

Fixed In:
1.8.2

Opened: Sep 22, 2023

Severity: 1-Blocking

Symptoms

When CRD Conversion Webhook is installed in non-default namespace, CA bundle cannot be injected and configured in API server. This would cause all of the requests sent to CRD Conversion Webhook to fail.

Impact

When this issue happens, all requests that need conversion will fail.

Conditions

Installing CRD Conversion Webhook in non-default namespace.

Workaround

Re-install CRD Conversion Webhook in default namespace.

Fix Information

The namespace that CRD Conversion Webhook is installed contains the secret with CA certificate. Even if it is not in default namespace, CA bundle can be injected properly for the communication between API server and CRD Conversion Webhook.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips