CVE-2025-1974: The admission webhook becomes a cluster secret boundary

Admission configuration tests spawn unexpected processes even though external ingress traffic looks normal. Contain the exposed path and restore the affected workflow without weakening its security boundary.

Jamie Engineering lead · 02:13 a.m.

Analytics dashboard / ca-central. Investigate ingress-nginx, restore service, and verify the result.