Update cmd/hubagent/options/validation.go

weng271190436 · Copilot · web-flow · commit 94acacb20222 · 2025-12-15T17:24:37.000-05:00
Co-authored-by: Copilot &lt;175728472+Copilot@users.noreply.github.com&gt;
diff --git a/cmd/hubagent/options/validation.go b/cmd/hubagent/options/validation.go
@@ -57,7 +57,7 @@ func (o *Options) Validate() field.ErrorList {
 	}
 
 	if o.UseCertManager && !o.EnableWorkload {
-		errs = append(errs, field.Invalid(newPath.Child("UseCertManager"), o.UseCertManager, "UseCertManager requires EnableWorkload to be true (cert-manager pods need to run in the hub cluster)"))
+		errs = append(errs, field.Invalid(newPath.Child("UseCertManager"), o.UseCertManager, "UseCertManager requires EnableWorkload to be true (when EnableWorkload is false, a validating webhook blocks pod creation except for certain system pods; cert-manager controller pods must be allowed to run in the hub cluster)"))
 	}
 
 	connectionType := o.WebhookClientConnectionType

Original file line number	Diff line number	Diff line change
`@@ -57,7 +57,7 @@ func (o *Options) Validate() field.ErrorList {`
`57`	`57`	`}`
`58`	`58`
`59`	`59`	`if o.UseCertManager && !o.EnableWorkload {`
`60`		`- errs = append(errs, field.Invalid(newPath.Child("UseCertManager"), o.UseCertManager, "UseCertManager requires EnableWorkload to be true (cert-manager pods need to run in the hub cluster)"))`
	`60`	`+ errs = append(errs, field.Invalid(newPath.Child("UseCertManager"), o.UseCertManager, "UseCertManager requires EnableWorkload to be true (when EnableWorkload is false, a validating webhook blocks pod creation except for certain system pods; cert-manager controller pods must be allowed to run in the hub cluster)"))`
`61`	`61`	`}`
`62`	`62`
`63`	`63`	`connectionType := o.WebhookClientConnectionType`