Admission-webhook crashes after node restart

[Chunosov]

From time to time we see issues after node reboot - admission-webhook stays in CrashLoopBack, the logs complain that the mutatingwebhookconfiguration is already there. Removing the existing configuration solves the problem:

WH=$(kubectl get pods -l app=admission-webhook-k8s -n nsm-system --template '{{range .items}}{{.metadata.name}}{{"\n"}}{{end}}')  
kubectl delete mutatingwebhookconfiguration ${WH} 

{
  "level":"fatal",
  "ts":1646820191.1554844,
  "caller":"build/main.go:328",
  "msg":"mutatingwebhookconfigurations.admissionregistration.k8s.io \"admission-webhook-k8s-7b9d7f98c8-5xgln\" already exists",
  "stacktrace":"main.main\n\t/build/main.go:328\nruntime.main\n\t/usr/local/go/src/runtime/proc.go:225"
}

Probable reason:
It is related to thing that admission webhook is using self signed cert and when admission webhook restarts it generates a new cert that is not eual to cert from the registered k8s configuraiton

[denis-tingaikin]

I think you could be intrested in start with https://github.com/networkservicemesh/cmd-admission-webhook-k8s --> https://github.com/networkservicemesh/cmd-admission-webhook-k8s/blob/main/internal/config/config.go#L128

[denis-tingaikin]

Should be fixed by networkservicemesh/cmd-admission-webhook-k8s#98