問題文
An engineer notes that Kyverno reconfigures its webhooks automatically. Which container flag turns this off, and what happens when it is off?
選択肢
- protectManagedResources set to true, after which the webhook objects become read-only to everyone except the Kyverno service account.
- webhookRegistrationTimeout set to 0.
- forceFailurePolicyIgnore set to true, which detaches the webhook from the policy set so that the configuration becomes static.
- autoUpdateWebhooks set to false, after which Kyverno creates a default webhook configuration matching all resources and the ConfigMap webhook settings are ignored.