From 32294717e76f9fb8ee8a659e42b29d7d01829c45 Mon Sep 17 00:00:00 2001
From: Trevor Nierman <tnierman@redhat.com>
Date: Fri, 27 Feb 2026 11:21:44 -0500
Subject: [PATCH] Add new servicelog template for customer webhooks blocking
 nodepool upgrade

---
 hcp/webhook_blocking_nodepool_update.json | 12 ++++++++++++
 1 file changed, 12 insertions(+)
 create mode 100644 hcp/webhook_blocking_nodepool_update.json

diff --git a/hcp/webhook_blocking_nodepool_update.json b/hcp/webhook_blocking_nodepool_update.json
new file mode 100644
index 0000000..13fde4e
--- /dev/null
+++ b/hcp/webhook_blocking_nodepool_update.json
@@ -0,0 +1,12 @@
+{
+  "severity": "Major",
+  "service_name": "SREManualAction",
+  "log_type": "cluster-configuration",
+  "summary": "Action required: Webhook blocking pod eviction during nodepool update",
+  "description": "Your cluster's nodepool `${NODEPOOL}` is unable to complete an update because a validating or mutating webhook `${WEBHOOK_NAME}` is preventing the eviction of pod `${POD}` in namespace `${NAMESPACE}`. Please review the webhook configuration and update it to allow pod evictions during node updates. Without action, your nodepool update may remain blocked. For more information on admission webhooks, see the documentation: https://docs.openshift.com/rosa/architecture/admission-plug-ins.html.",
+  "doc_references": [
+    "https://docs.openshift.com/rosa/architecture/admission-plug-ins.html",
+    "https://kubernetes.io/docs/reference/access-authn-authz/extensible-admission-controllers/"
+  ],
+  "internal_only": false
+}