pandocore. io Anything that installs an admission webhook into your cluster puts itself in the critical path of pod creation: service meshes, secret injectors, policy engines, security agents. One field in that config, failurePolicy , decides what happens when the vendor's code goes down.
Source: [Dev.to](https://dev.to/eaferstl/why-we-ship-our-security-webhook-fail-open-11ap)