From 1b02b3a4b2f5759222af25aaa5bf0887e2aca0be Mon Sep 17 00:00:00 2001
From: Alvaro Aleman <alvaroaleman@users.noreply.github.com>
Date: Fri, 13 Apr 2018 11:23:59 +0200
Subject: [PATCH] Add a note about the required cn for
 ValidatingWebhookConfiguration (#7808)

* Add a note about the required cn for ValidatingWebhookConfiguration

* Move extra info for cn of ValidatingWebhookConfiguration into a comment
---
 docs/admin/extensible-admission-controllers.md | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/docs/admin/extensible-admission-controllers.md b/docs/admin/extensible-admission-controllers.md
index 96ca73a6b9..51bcac6787 100644
--- a/docs/admin/extensible-admission-controllers.md
+++ b/docs/admin/extensible-admission-controllers.md
@@ -119,6 +119,9 @@ webhooks:
     caBundle: <pem encoded ca cert that signs the server cert used by the webhook>
 ```
 
+*Note*: When using `clientConfig.service`, the server cert must be valid for
+`<svc_name>.<svc_namespace>.svc`.
+
 When an apiserver receives a request that matches one of the `rules`, the
 apiserver sends an `admissionReview` request to webhook as specified in the
 `clientConfig`.