mirror of https://git.rancher.io/charts
make remove 1.0.4+up0.2.5-rc1
parent
5e3c941301
commit
48806128c3
Binary file not shown.
|
@ -1,15 +0,0 @@
|
||||||
annotations:
|
|
||||||
catalog.cattle.io/certified: rancher
|
|
||||||
catalog.cattle.io/hidden: "true"
|
|
||||||
catalog.cattle.io/namespace: cattle-system
|
|
||||||
catalog.cattle.io/os: linux
|
|
||||||
catalog.cattle.io/release-name: rancher-webhook
|
|
||||||
apiVersion: v2
|
|
||||||
appVersion: 0.2.5-rc1
|
|
||||||
dependencies:
|
|
||||||
- condition: capi.enabled
|
|
||||||
name: capi
|
|
||||||
repository: ""
|
|
||||||
description: ValidatingAdmissionWebhook for Rancher types
|
|
||||||
name: rancher-webhook
|
|
||||||
version: 1.0.4+up0.2.5-rc1
|
|
|
@ -1,4 +0,0 @@
|
||||||
apiVersion: v2
|
|
||||||
appVersion: 0.0.0
|
|
||||||
name: capi
|
|
||||||
version: 0.0.0
|
|
|
@ -1,13 +0,0 @@
|
||||||
kind: Service
|
|
||||||
apiVersion: v1
|
|
||||||
metadata:
|
|
||||||
name: webhook-service
|
|
||||||
annotations:
|
|
||||||
need-a-cert.cattle.io/secret-name: rancher-webhook-tls
|
|
||||||
spec:
|
|
||||||
ports:
|
|
||||||
- name: https
|
|
||||||
port: 443
|
|
||||||
targetPort: 8777
|
|
||||||
selector:
|
|
||||||
app: rancher-webhook
|
|
|
@ -1,11 +0,0 @@
|
||||||
{{- define "system_default_registry" -}}
|
|
||||||
{{- if .Values.global.cattle.systemDefaultRegistry -}}
|
|
||||||
{{- printf "%s/" .Values.global.cattle.systemDefaultRegistry -}}
|
|
||||||
{{- else -}}
|
|
||||||
{{- "" -}}
|
|
||||||
{{- end -}}
|
|
||||||
{{- end -}}
|
|
||||||
|
|
||||||
{{- define "rancher-webhook.labels" -}}
|
|
||||||
app: rancher-webhook
|
|
||||||
{{- end }}
|
|
|
@ -1,48 +0,0 @@
|
||||||
apiVersion: apps/v1
|
|
||||||
kind: Deployment
|
|
||||||
metadata:
|
|
||||||
name: rancher-webhook
|
|
||||||
spec:
|
|
||||||
selector:
|
|
||||||
matchLabels:
|
|
||||||
app: rancher-webhook
|
|
||||||
template:
|
|
||||||
metadata:
|
|
||||||
labels:
|
|
||||||
app: rancher-webhook
|
|
||||||
spec:
|
|
||||||
volumes:
|
|
||||||
- name: tls
|
|
||||||
secret:
|
|
||||||
secretName: rancher-webhook-tls
|
|
||||||
{{- if .Values.global.hostNetwork }}
|
|
||||||
hostNetwork: true
|
|
||||||
{{- end }}
|
|
||||||
{{- with .Values.tolerations }}
|
|
||||||
tolerations:
|
|
||||||
{{- toYaml . | nindent 8 }}
|
|
||||||
{{- end }}
|
|
||||||
containers:
|
|
||||||
- env:
|
|
||||||
- name: STAMP
|
|
||||||
value: "{{.Values.stamp}}"
|
|
||||||
- name: ENABLE_CAPI
|
|
||||||
value: "{{.Values.capi.enabled}}"
|
|
||||||
- name: ENABLE_MCM
|
|
||||||
value: "{{.Values.mcm.enabled}}"
|
|
||||||
- name: NAMESPACE
|
|
||||||
valueFrom:
|
|
||||||
fieldRef:
|
|
||||||
fieldPath: metadata.namespace
|
|
||||||
image: '{{ template "system_default_registry" . }}{{ .Values.image.repository }}:{{ .Values.image.tag }}'
|
|
||||||
name: rancher-webhook
|
|
||||||
imagePullPolicy: "{{ .Values.image.imagePullPolicy }}"
|
|
||||||
ports:
|
|
||||||
- name: https
|
|
||||||
containerPort: 9443
|
|
||||||
- name: capi-https
|
|
||||||
containerPort: 8777
|
|
||||||
volumeMounts:
|
|
||||||
- name: tls
|
|
||||||
mountPath: /tmp/k8s-webhook-server/serving-certs
|
|
||||||
serviceAccountName: rancher-webhook
|
|
|
@ -1,19 +0,0 @@
|
||||||
{{- if .Values.preDelete.enabled }}
|
|
||||||
apiVersion: rbac.authorization.k8s.io/v1
|
|
||||||
kind: ClusterRoleBinding
|
|
||||||
metadata:
|
|
||||||
name: rancher-webhook-pre-delete
|
|
||||||
labels: {{ include "rancher-webhook.labels" . | nindent 4 }}
|
|
||||||
annotations:
|
|
||||||
"helm.sh/hook": pre-delete
|
|
||||||
"helm.sh/hook-weight": "2"
|
|
||||||
"helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded,hook-failed
|
|
||||||
roleRef:
|
|
||||||
apiGroup: rbac.authorization.k8s.io
|
|
||||||
kind: ClusterRole
|
|
||||||
name: rancher-webhook-pre-delete
|
|
||||||
subjects:
|
|
||||||
- kind: ServiceAccount
|
|
||||||
name: rancher-webhook-pre-delete
|
|
||||||
namespace: {{ .Release.Namespace }}
|
|
||||||
{{- end }}
|
|
|
@ -1,23 +0,0 @@
|
||||||
{{- if .Values.preDelete.enabled }}
|
|
||||||
kind: ClusterRole
|
|
||||||
apiVersion: rbac.authorization.k8s.io/v1
|
|
||||||
metadata:
|
|
||||||
name: rancher-webhook-pre-delete
|
|
||||||
labels: {{ include "rancher-webhook.labels" . | nindent 4 }}
|
|
||||||
annotations:
|
|
||||||
"helm.sh/hook": pre-delete
|
|
||||||
"helm.sh/hook-weight": "1"
|
|
||||||
"helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded,hook-failed
|
|
||||||
rules:
|
|
||||||
- apiGroups: [ "admissionregistration.k8s.io" ]
|
|
||||||
resources: [ "mutatingwebhookconfigurations" ]
|
|
||||||
verbs: [ "delete" ]
|
|
||||||
resourceNames: [ "rancher.cattle.io" ]
|
|
||||||
- apiGroups: [ "" ]
|
|
||||||
resources: [ "serviceaccounts" ]
|
|
||||||
verbs: [ "get" ]
|
|
||||||
- apiGroups: [ "policy" ]
|
|
||||||
resources: [ "podsecuritypolicies" ]
|
|
||||||
verbs: [ "use" ]
|
|
||||||
resourceNames: [ "rancher-webhook-pre-delete" ]
|
|
||||||
{{- end }}
|
|
|
@ -1,32 +0,0 @@
|
||||||
{{- if .Values.preDelete.enabled }}
|
|
||||||
apiVersion: batch/v1
|
|
||||||
kind: Job
|
|
||||||
metadata:
|
|
||||||
name: rancher-webhook-pre-delete
|
|
||||||
namespace: {{ .Release.Namespace }}
|
|
||||||
labels: {{ include "rancher-webhook.labels" . | nindent 4 }}
|
|
||||||
annotations:
|
|
||||||
"helm.sh/hook": pre-delete
|
|
||||||
"helm.sh/hook-weight": "3"
|
|
||||||
"helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded
|
|
||||||
spec:
|
|
||||||
backoffLimit: 3
|
|
||||||
template:
|
|
||||||
metadata:
|
|
||||||
name: rancher-webhook-pre-delete
|
|
||||||
labels: {{ include "rancher-webhook.labels" . | nindent 8 }}
|
|
||||||
spec:
|
|
||||||
serviceAccountName: rancher-webhook-pre-delete
|
|
||||||
restartPolicy: OnFailure
|
|
||||||
{{- with .Values.tolerations }}
|
|
||||||
tolerations:
|
|
||||||
{{- toYaml . | nindent 8 }}
|
|
||||||
{{- end }}
|
|
||||||
containers:
|
|
||||||
- name: rancher-webhook-pre-delete
|
|
||||||
image: "{{ include "system_default_registry" . }}{{ .Values.preDelete.image.repository }}:{{ .Values.preDelete.image.tag }}"
|
|
||||||
imagePullPolicy: IfNotPresent
|
|
||||||
securityContext:
|
|
||||||
runAsUser: 0
|
|
||||||
command: [ "kubectl", "delete", "--ignore-not-found=true", "mutatingwebhookconfigurations", "rancher.cattle.io" ]
|
|
||||||
{{- end }}
|
|
|
@ -1,33 +0,0 @@
|
||||||
{{- if .Values.preDelete.enabled }}
|
|
||||||
apiVersion: policy/v1beta1
|
|
||||||
kind: PodSecurityPolicy
|
|
||||||
metadata:
|
|
||||||
name: rancher-webhook-pre-delete
|
|
||||||
labels: {{ include "rancher-webhook.labels" . | nindent 4 }}
|
|
||||||
annotations:
|
|
||||||
"helm.sh/hook": pre-delete
|
|
||||||
"helm.sh/hook-weight": "1"
|
|
||||||
"helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded,hook-failed
|
|
||||||
spec:
|
|
||||||
privileged: false
|
|
||||||
hostNetwork: false
|
|
||||||
hostIPC: false
|
|
||||||
hostPID: false
|
|
||||||
runAsUser:
|
|
||||||
rule: 'RunAsAny'
|
|
||||||
seLinux:
|
|
||||||
rule: 'RunAsAny'
|
|
||||||
supplementalGroups:
|
|
||||||
rule: 'MustRunAs'
|
|
||||||
ranges:
|
|
||||||
- min: 1
|
|
||||||
max: 65535
|
|
||||||
fsGroup:
|
|
||||||
rule: 'MustRunAs'
|
|
||||||
ranges:
|
|
||||||
- min: 1
|
|
||||||
max: 65535
|
|
||||||
readOnlyRootFilesystem: false
|
|
||||||
volumes:
|
|
||||||
- 'secret'
|
|
||||||
{{- end }}
|
|
|
@ -1,12 +0,0 @@
|
||||||
{{- if .Values.preDelete.enabled }}
|
|
||||||
apiVersion: v1
|
|
||||||
kind: ServiceAccount
|
|
||||||
metadata:
|
|
||||||
name: rancher-webhook-pre-delete
|
|
||||||
namespace: {{ .Release.Namespace }}
|
|
||||||
labels: {{ include "rancher-webhook.labels" . | nindent 4 }}
|
|
||||||
annotations:
|
|
||||||
"helm.sh/hook": pre-delete
|
|
||||||
"helm.sh/hook-weight": "1"
|
|
||||||
"helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded,hook-failed
|
|
||||||
{{- end }}
|
|
|
@ -1,12 +0,0 @@
|
||||||
apiVersion: rbac.authorization.k8s.io/v1
|
|
||||||
kind: ClusterRoleBinding
|
|
||||||
metadata:
|
|
||||||
name: rancher-webhook
|
|
||||||
roleRef:
|
|
||||||
apiGroup: rbac.authorization.k8s.io
|
|
||||||
kind: ClusterRole
|
|
||||||
name: cluster-admin
|
|
||||||
subjects:
|
|
||||||
- kind: ServiceAccount
|
|
||||||
name: rancher-webhook
|
|
||||||
namespace: {{.Release.Namespace}}
|
|
|
@ -1,13 +0,0 @@
|
||||||
kind: Service
|
|
||||||
apiVersion: v1
|
|
||||||
metadata:
|
|
||||||
name: rancher-webhook
|
|
||||||
namespace: cattle-system
|
|
||||||
spec:
|
|
||||||
ports:
|
|
||||||
- port: 443
|
|
||||||
targetPort: 9443
|
|
||||||
protocol: TCP
|
|
||||||
name: https
|
|
||||||
selector:
|
|
||||||
app: rancher-webhook
|
|
|
@ -1,4 +0,0 @@
|
||||||
apiVersion: v1
|
|
||||||
kind: ServiceAccount
|
|
||||||
metadata:
|
|
||||||
name: rancher-webhook
|
|
|
@ -1,19 +0,0 @@
|
||||||
apiVersion: admissionregistration.k8s.io/v1
|
|
||||||
kind: ValidatingWebhookConfiguration
|
|
||||||
metadata:
|
|
||||||
name: rancher.cattle.io
|
|
||||||
webhooks:
|
|
||||||
- admissionReviewVersions:
|
|
||||||
- v1
|
|
||||||
- v1beta1
|
|
||||||
clientConfig:
|
|
||||||
service:
|
|
||||||
name: rancher-webhook
|
|
||||||
namespace: cattle-system
|
|
||||||
path: /v1/webhook/validation
|
|
||||||
port: 443
|
|
||||||
failurePolicy: Ignore
|
|
||||||
matchPolicy: Equivalent
|
|
||||||
name: rancher.cattle.io
|
|
||||||
sideEffects: None
|
|
||||||
timeoutSeconds: 10
|
|
|
@ -1,24 +0,0 @@
|
||||||
image:
|
|
||||||
repository: rancher/rancher-webhook
|
|
||||||
tag: v0.2.5-rc1
|
|
||||||
imagePullPolicy: IfNotPresent
|
|
||||||
|
|
||||||
global:
|
|
||||||
cattle:
|
|
||||||
systemDefaultRegistry: ""
|
|
||||||
hostNetwork: false
|
|
||||||
|
|
||||||
capi:
|
|
||||||
enabled: false
|
|
||||||
|
|
||||||
mcm:
|
|
||||||
enabled: true
|
|
||||||
|
|
||||||
preDelete:
|
|
||||||
enabled: true
|
|
||||||
image:
|
|
||||||
repository: rancher/kubectl
|
|
||||||
tag: v1.20.2
|
|
||||||
|
|
||||||
# tolerations for the webhook deployment. See https://kubernetes.io/docs/concepts/scheduling-eviction/taint-and-toleration/ for more info
|
|
||||||
tolerations: []
|
|
10
index.yaml
10
index.yaml
|
@ -6731,18 +6731,18 @@ entries:
|
||||||
catalog.cattle.io/os: linux
|
catalog.cattle.io/os: linux
|
||||||
catalog.cattle.io/release-name: rancher-webhook
|
catalog.cattle.io/release-name: rancher-webhook
|
||||||
apiVersion: v2
|
apiVersion: v2
|
||||||
appVersion: 0.2.5-rc1
|
appVersion: 0.2.5-rc2
|
||||||
created: "2022-01-21T16:27:53.531164-05:00"
|
created: "2022-02-24T16:33:57.771374-08:00"
|
||||||
dependencies:
|
dependencies:
|
||||||
- condition: capi.enabled
|
- condition: capi.enabled
|
||||||
name: capi
|
name: capi
|
||||||
repository: ""
|
repository: ""
|
||||||
description: ValidatingAdmissionWebhook for Rancher types
|
description: ValidatingAdmissionWebhook for Rancher types
|
||||||
digest: 47fc5d796c783324c41e8781269e04fb01131239ea22629980902816d847a61a
|
digest: 5fe8efd71eb20fe5f5ea029d5aee5e59850184f58e8ba4c18c3bf69530ef2ca7
|
||||||
name: rancher-webhook
|
name: rancher-webhook
|
||||||
urls:
|
urls:
|
||||||
- assets/rancher-webhook/rancher-webhook-1.0.4+up0.2.5-rc1.tgz
|
- assets/rancher-webhook/rancher-webhook-1.0.4+up0.2.5-rc2.tgz
|
||||||
version: 1.0.4+up0.2.5-rc1
|
version: 1.0.4+up0.2.5-rc2
|
||||||
- annotations:
|
- annotations:
|
||||||
catalog.cattle.io/certified: rancher
|
catalog.cattle.io/certified: rancher
|
||||||
catalog.cattle.io/hidden: "true"
|
catalog.cattle.io/hidden: "true"
|
||||||
|
|
Loading…
Reference in New Issue