mirror of
https://github.com/bjw-s-labs/helm-charts.git
synced 2025-07-03 08:37:03 +02:00
39 lines
1.2 KiB
YAML
39 lines
1.2 KiB
YAML
{{- include "bjw-s.common.loader.init" . -}}
|
|
---
|
|
apiVersion: admissionregistration.k8s.io/v1
|
|
kind: MutatingWebhookConfiguration
|
|
metadata:
|
|
name: {{ include "bjw-s.common.lib.chart.names.fullname" . | quote }}
|
|
{{- with (include "bjw-s.common.lib.metadata.allLabels" $ | fromYaml) }}
|
|
labels: {{- toYaml . | nindent 4 }}
|
|
{{- end }}
|
|
annotations:
|
|
cert-manager.io/inject-ca-from: "{{ .Release.Namespace }}/{{ include "k8s-ycl.servingCertificate" . }}"
|
|
webhooks:
|
|
- name: "{{ include "bjw-s.common.lib.chart.names.fullname" . }}.svc.cluster.local"
|
|
namespaceSelector:
|
|
matchExpressions:
|
|
- key: kubernetes.io/metadata.name
|
|
operator: NotIn
|
|
values:
|
|
- {{ .Release.Namespace | quote }}
|
|
clientConfig:
|
|
service:
|
|
namespace: {{ .Release.Namespace | quote }}
|
|
name: {{ include "bjw-s.common.lib.chart.names.fullname" . }}-webhook
|
|
path: {{ include "k8s-ycl.webhookPath" . }}
|
|
port: {{ include "k8s-ycl.webhookPort" . }}
|
|
failurePolicy: Fail
|
|
admissionReviewVersions: ["v1", "v1beta1"]
|
|
sideEffects: None
|
|
timeoutSeconds: 5
|
|
rules:
|
|
- apiGroups:
|
|
- ""
|
|
apiVersions:
|
|
- v1
|
|
operations:
|
|
- CREATE
|
|
- UPDATE
|
|
resources:
|
|
- pods
|