kubelatte-ce
Форк от sbertech/kubelatte-ce
67 строк · 1.8 Кб
1{{- if .Values.modes.creation.enabled }}
2---
3kind: ValidatingWebhookConfiguration
4apiVersion: admissionregistration.k8s.io/v1
5metadata:
6name: kubelatte-ce-valid-tri-cfg
7webhooks:
8- name: kubelatte.validation.tri
9sideEffects: None
10clientConfig:
11caBundle: {{ .Values.webhookConfigs.auth.tls.caCertBase64 }}
12service:
13namespace: {{ .Release.Namespace }}
14name: {{ .Values.service.name }}
15path: /validate/tri
16port: {{ .Values.service.port }}
17rules:
18- operations:
19- UPDATE
20apiGroups:
21- kubelatte.io
22apiVersions:
23- v1alpha1
24resources:
25- triggerinstances
26scope: '*'
27matchPolicy: Exact
28namespaceSelector: {}
29admissionReviewVersions:
30- v1alpha1
31- v1
32failurePolicy: Fail
33objectSelector: {}
34timeoutSeconds: 5
35{{- end }}
36{{- if .Values.webhookConfigs.enabled }}
37{{- if .Values.modes.validation.enabled }}
38{{ range .Values.webhookConfigs.validating }}
39---
40apiVersion: admissionregistration.k8s.io/v1
41kind: ValidatingWebhookConfiguration
42metadata:
43name: {{ .name }}
44webhooks:
45{{ range .webhooks }}
46- name: {{ .name }}
47clientConfig:
48caBundle: {{ $.Values.webhookConfigs.auth.tls.caCertBase64 }}
49service:
50namespace: {{ $.Release.Namespace }}
51name: {{ $.Values.service.name }}
52path: /validate
53port: {{ $.Values.service.port }}
54rules: {{ .rules | toYaml | nindent 6 }}
55failurePolicy: {{ .failurePolicy | default "Ignore" }}
56matchPolicy: Exact
57namespaceSelector: {{ .namespaceSelector | toYaml | nindent 6 }}
58objectSelector: {{ .objectSelector | toYaml | nindent 6 }}
59sideEffects: None
60timeoutSeconds: {{ .timeoutSeconds | default "5" }}
61admissionReviewVersions:
62- v1beta1
63- v1
64{{- end }}
65{{- end }}
66{{- end }}
67{{- end }}
68
69
70