Remove rancher-webhook for webhook-v0.3.0-rc3

2022-10-03 16:41:19 -04:00 · 2022-10-03 16:41:19 -04:00 · b07c306b95
parent a4e1529d62
commit b07c306b95
17 changed files with 5 additions and 319 deletions
--- a/assets/rancher-webhook/rancher-webhook-2.0.0+up0.3.0-rc3.tgz
+++ b/assets/rancher-webhook/rancher-webhook-2.0.0+up0.3.0-rc3.tgz
--- a/charts/rancher-webhook/2.0.0+up0.3.0-rc3/Chart.yaml
+++ b/charts/rancher-webhook/2.0.0+up0.3.0-rc3/Chart.yaml
@ -1,18 +0,0 @@
-annotations:
-  catalog.cattle.io/certified: rancher
-  catalog.cattle.io/hidden: "true"
-  catalog.cattle.io/kube-version: '>= 1.16.0-0 < 1.25.0-0'
-  catalog.cattle.io/namespace: cattle-system
-  catalog.cattle.io/os: linux
-  catalog.cattle.io/permits-os: linux,windows
-  catalog.cattle.io/rancher-version: '>= 2.7.0-0 < 2.8.0-0'
-  catalog.cattle.io/release-name: rancher-webhook
-apiVersion: v2
-appVersion: 0.3.0-rc3
-dependencies:
- condition: capi.enabled
-  name: capi
-  repository: ""
-description: ValidatingAdmissionWebhook for Rancher types
-name: rancher-webhook
-version: 2.0.0+up0.3.0-rc3
--- a/charts/rancher-webhook/2.0.0+up0.3.0-rc3/charts/capi/Chart.yaml
+++ b/charts/rancher-webhook/2.0.0+up0.3.0-rc3/charts/capi/Chart.yaml
@ -1,4 +0,0 @@
-apiVersion: v2
-appVersion: 0.0.0
-name: capi
-version: 0.0.0
--- a/charts/rancher-webhook/2.0.0+up0.3.0-rc3/charts/capi/templates/service.yaml
+++ b/charts/rancher-webhook/2.0.0+up0.3.0-rc3/charts/capi/templates/service.yaml
@ -1,13 +0,0 @@
-kind: Service
-apiVersion: v1
-metadata:
-  name: webhook-service
-  annotations:
-    need-a-cert.cattle.io/secret-name: rancher-webhook-tls
-spec:
-  ports:
-  - name: https
-    port: 443
-    targetPort: 8777
-  selector:
-    app: rancher-webhook
--- a/charts/rancher-webhook/2.0.0+up0.3.0-rc3/templates/_helpers.tpl
+++ b/charts/rancher-webhook/2.0.0+up0.3.0-rc3/templates/_helpers.tpl
@ -1,22 +0,0 @@
-{{- define "system_default_registry" -}}
-{{- if .Values.global.cattle.systemDefaultRegistry -}}
-{{- printf "%s/" .Values.global.cattle.systemDefaultRegistry -}}
-{{- else -}}
-{{- "" -}}
-{{- end -}}
-{{- end -}}
-
-{{- define "rancher-webhook.labels" -}}
-app: rancher-webhook
-{{- end }}
-
-{{- define "linux-node-tolerations" -}}
- key: "cattle.io/os"
-  value: "linux"
-  effect: "NoSchedule"
-  operator: "Equal"
-{{- end -}}
-
-{{- define "linux-node-selector" -}}
-kubernetes.io/os: linux
-{{- end -}}
--- a/charts/rancher-webhook/2.0.0+up0.3.0-rc3/templates/deployment.yaml
+++ b/charts/rancher-webhook/2.0.0+up0.3.0-rc3/templates/deployment.yaml
@ -1,55 +0,0 @@
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: rancher-webhook
-spec:
-  selector:
-    matchLabels:
-      app: rancher-webhook
-  template:
-    metadata:
-      labels:
-        app: rancher-webhook
-    spec:
-      volumes:
-      - name: tls
-        secret:
-          secretName: rancher-webhook-tls
-      {{- if .Values.global.hostNetwork }}
-      hostNetwork: true
-      {{- end }}
-      nodeSelector: {{ include "linux-node-selector" . | nindent 8 }}
-      {{- if .Values.nodeSelector }}
-{{ toYaml .Values.nodeSelector | indent 8 }}
-      {{- end }}
-      tolerations: {{ include "linux-node-tolerations" . | nindent 6 }}
-      {{- if .Values.tolerations }}
-{{ toYaml .Values.tolerations | indent 6 }}
-      {{- end }}
-      containers:
-      - env:
-        - name: STAMP
-          value: "{{.Values.stamp}}"
-        - name: ENABLE_CAPI
-          value: "{{.Values.capi.enabled}}"
-        - name: ENABLE_MCM
-          value: "{{.Values.mcm.enabled}}"
-        - name: NAMESPACE
-          valueFrom:
-            fieldRef:
-              fieldPath: metadata.namespace
-        image: '{{ template "system_default_registry" . }}{{ .Values.image.repository }}:{{ .Values.image.tag }}'
-        name: rancher-webhook
-        imagePullPolicy: "{{ .Values.image.imagePullPolicy }}"
-        ports:
-        - name: https
-          containerPort: 9443
-        - name: capi-https
-          containerPort: 8777
-        volumeMounts:
-        - name: tls
-          mountPath: /tmp/k8s-webhook-server/serving-certs
-      serviceAccountName: rancher-webhook
-      {{- if .Values.priorityClassName }}
-      priorityClassName: "{{.Values.priorityClassName}}"
-      {{- end }}
--- a/charts/rancher-webhook/2.0.0+up0.3.0-rc3/templates/pre-delete-hook-cluster-role-binding.yaml
+++ b/charts/rancher-webhook/2.0.0+up0.3.0-rc3/templates/pre-delete-hook-cluster-role-binding.yaml
@ -1,19 +0,0 @@
-{{- if .Values.preDelete.enabled }}
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRoleBinding
-metadata:
-  name: rancher-webhook-pre-delete
-  labels: {{ include "rancher-webhook.labels" . | nindent 4 }}
-  annotations:
-    "helm.sh/hook": pre-delete
-    "helm.sh/hook-weight": "2"
-    "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded,hook-failed
-roleRef:
-  apiGroup: rbac.authorization.k8s.io
-  kind: ClusterRole
-  name: rancher-webhook-pre-delete
-subjects:
-  - kind: ServiceAccount
-    name: rancher-webhook-pre-delete
-    namespace: {{ .Release.Namespace }}
-{{- end }}
--- a/charts/rancher-webhook/2.0.0+up0.3.0-rc3/templates/pre-delete-hook-cluster-role.yaml
+++ b/charts/rancher-webhook/2.0.0+up0.3.0-rc3/templates/pre-delete-hook-cluster-role.yaml
@ -1,23 +0,0 @@
-{{- if .Values.preDelete.enabled }}
-kind: ClusterRole
-apiVersion: rbac.authorization.k8s.io/v1
-metadata:
-  name: rancher-webhook-pre-delete
-  labels: {{ include "rancher-webhook.labels" . | nindent 4 }}
-  annotations:
-    "helm.sh/hook": pre-delete
-    "helm.sh/hook-weight": "1"
-    "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded,hook-failed
-rules:
-  - apiGroups: [ "admissionregistration.k8s.io" ]
-    resources: [ "mutatingwebhookconfigurations" ]
-    verbs: [ "delete" ]
-    resourceNames: [ "rancher.cattle.io" ]
-  - apiGroups: [ "" ]
-    resources: [ "serviceaccounts" ]
-    verbs: [ "get" ]
-  - apiGroups: [ "policy" ]
-    resources: [ "podsecuritypolicies" ]
-    verbs: [ "use" ]
-    resourceNames: [ "rancher-webhook-pre-delete" ]
-{{- end }}
--- a/charts/rancher-webhook/2.0.0+up0.3.0-rc3/templates/pre-delete-hook-job.yaml
+++ b/charts/rancher-webhook/2.0.0+up0.3.0-rc3/templates/pre-delete-hook-job.yaml
@ -1,39 +0,0 @@
-{{- if .Values.preDelete.enabled }}
-apiVersion: batch/v1
-kind: Job
-metadata:
-  name: rancher-webhook-pre-delete
-  namespace: {{ .Release.Namespace }}
-  labels: {{ include "rancher-webhook.labels" . | nindent 4 }}
-  annotations:
-    "helm.sh/hook": pre-delete
-    "helm.sh/hook-weight": "3"
-    "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded
-spec:
-  backoffLimit: 3
-  template:
-    metadata:
-      name: rancher-webhook-pre-delete
-      labels: {{ include "rancher-webhook.labels" . | nindent 8 }}
-    spec:
-      serviceAccountName: rancher-webhook-pre-delete
-      {{- if .Values.priorityClassName }}
-      priorityClassName: "{{.Values.priorityClassName}}"
-      {{- end }}
-      restartPolicy: OnFailure
-      nodeSelector: {{ include "linux-node-selector" . | nindent 8 }}
-      {{- if .Values.nodeSelector }}
-{{ toYaml .Values.nodeSelector | indent 8 }}
-      {{- end }}
-      tolerations: {{ include "linux-node-tolerations" . | nindent 6 }}
-      {{- if .Values.tolerations }}
-{{ toYaml .Values.tolerations | indent 6 }}
-      {{- end }}
-      containers:
-        - name: rancher-webhook-pre-delete
-          image: "{{ include "system_default_registry" . }}{{ .Values.preDelete.image.repository }}:{{ .Values.preDelete.image.tag }}"
-          imagePullPolicy: IfNotPresent
-          securityContext:
-            runAsUser: 0
-          command: [ "kubectl", "delete", "--ignore-not-found=true", "mutatingwebhookconfigurations", "rancher.cattle.io" ]
-{{- end }}
--- a/charts/rancher-webhook/2.0.0+up0.3.0-rc3/templates/pre-delete-hook-psp.yaml
+++ b/charts/rancher-webhook/2.0.0+up0.3.0-rc3/templates/pre-delete-hook-psp.yaml
@ -1,33 +0,0 @@
-{{- if .Values.preDelete.enabled }}
-apiVersion: policy/v1beta1
-kind: PodSecurityPolicy
-metadata:
-  name: rancher-webhook-pre-delete
-  labels: {{ include "rancher-webhook.labels" . | nindent 4 }}
-  annotations:
-    "helm.sh/hook": pre-delete
-    "helm.sh/hook-weight": "1"
-    "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded,hook-failed
-spec:
-  privileged: false
-  hostNetwork: false
-  hostIPC: false
-  hostPID: false
-  runAsUser:
-    rule: 'RunAsAny'
-  seLinux:
-    rule: 'RunAsAny'
-  supplementalGroups:
-    rule: 'MustRunAs'
-    ranges:
-      - min: 1
-        max: 65535
-  fsGroup:
-    rule: 'MustRunAs'
-    ranges:
-      - min: 1
-        max: 65535
-  readOnlyRootFilesystem: false
-  volumes:
-    - 'secret'
-{{- end }}
--- a/charts/rancher-webhook/2.0.0+up0.3.0-rc3/templates/pre-delete-hook-service-account.yaml
+++ b/charts/rancher-webhook/2.0.0+up0.3.0-rc3/templates/pre-delete-hook-service-account.yaml
@ -1,12 +0,0 @@
-{{- if .Values.preDelete.enabled }}
-apiVersion: v1
-kind: ServiceAccount
-metadata:
-  name: rancher-webhook-pre-delete
-  namespace: {{ .Release.Namespace }}
-  labels: {{ include "rancher-webhook.labels" . | nindent 4 }}
-  annotations:
-    "helm.sh/hook": pre-delete
-    "helm.sh/hook-weight": "1"
-    "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded,hook-failed
-{{- end }}
--- a/charts/rancher-webhook/2.0.0+up0.3.0-rc3/templates/rbac.yaml
+++ b/charts/rancher-webhook/2.0.0+up0.3.0-rc3/templates/rbac.yaml
@ -1,12 +0,0 @@
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRoleBinding
-metadata:
-  name: rancher-webhook
-roleRef:
-  apiGroup: rbac.authorization.k8s.io
-  kind: ClusterRole
-  name: cluster-admin
-subjects:
- kind: ServiceAccount
-  name: rancher-webhook
-  namespace: {{.Release.Namespace}}
--- a/charts/rancher-webhook/2.0.0+up0.3.0-rc3/templates/service.yaml
+++ b/charts/rancher-webhook/2.0.0+up0.3.0-rc3/templates/service.yaml
@ -1,13 +0,0 @@
-kind: Service
-apiVersion: v1
-metadata:
-  name: rancher-webhook
-  namespace: cattle-system
-spec:
-  ports:
-  - port: 443
-    targetPort: 9443
-    protocol: TCP
-    name: https
-  selector:
-    app: rancher-webhook
--- a/charts/rancher-webhook/2.0.0+up0.3.0-rc3/templates/serviceaccount.yaml
+++ b/charts/rancher-webhook/2.0.0+up0.3.0-rc3/templates/serviceaccount.yaml
@ -1,4 +0,0 @@
-apiVersion: v1
-kind: ServiceAccount
-metadata:
-  name: rancher-webhook
--- a/charts/rancher-webhook/2.0.0+up0.3.0-rc3/templates/webhook.yaml
+++ b/charts/rancher-webhook/2.0.0+up0.3.0-rc3/templates/webhook.yaml
@ -1,19 +0,0 @@
-apiVersion: admissionregistration.k8s.io/v1
-kind: ValidatingWebhookConfiguration
-metadata:
-  name: rancher.cattle.io
-webhooks:
- admissionReviewVersions:
-  - v1
-  - v1beta1
-  clientConfig:
-    service:
-      name: rancher-webhook
-      namespace: cattle-system
-      path: /v1/webhook/validation
-      port: 443
-  failurePolicy: Ignore
-  matchPolicy: Equivalent
-  name: rancher.cattle.io
-  sideEffects: None
-  timeoutSeconds: 10
--- a/charts/rancher-webhook/2.0.0+up0.3.0-rc3/values.yaml
+++ b/charts/rancher-webhook/2.0.0+up0.3.0-rc3/values.yaml
@ -1,28 +0,0 @@
-image:
-  repository: rancher/rancher-webhook
-  tag: v0.3.0-rc3
-  imagePullPolicy: IfNotPresent
-
-global:
-  cattle:
-    systemDefaultRegistry: ""
-  hostNetwork: false
-
-capi:
-  enabled: false
-
-mcm:
-  enabled: true
-
-preDelete:
-  enabled: true
-  image:
-    repository: rancher/kubectl
-    tag: v1.23.3
-
-# tolerations for the webhook deployment. See https://kubernetes.io/docs/concepts/scheduling-eviction/taint-and-toleration/ for more info
-tolerations: []
-nodeSelector: {}
-
-## PriorityClassName assigned to deployment.
-priorityClassName: ""
--- a/index.yaml
+++ b/index.yaml
@ -9704,18 +9704,18 @@ entries:
      catalog.cattle.io/rancher-version: '>= 2.7.0-0 < 2.8.0-0'
      catalog.cattle.io/release-name: rancher-webhook
    apiVersion: v2
-    appVersion: 0.3.0-rc3
-    created: "2022-09-28T19:28:24.795223-04:00"
+    appVersion: 0.3.0-rc4
+    created: "2022-10-03T16:40:45.782641-04:00"
    dependencies:
    - condition: capi.enabled
      name: capi
      repository: ""
    description: ValidatingAdmissionWebhook for Rancher types
-    digest: 7fb17d80fb77b10465972cb1fce30f6d15a7b6eb457f4c2e1cd6a0a519fa8d79
+    digest: 28dc2153635fe001d4bdb4fc0edabccaca343de66894540a41a67f599bd29c9f
    name: rancher-webhook
    urls:
-    - assets/rancher-webhook/rancher-webhook-2.0.0+up0.3.0-rc3.tgz
-    version: 2.0.0+up0.3.0-rc3
+    - assets/rancher-webhook/rancher-webhook-2.0.0+up0.3.0-rc4.tgz
+    version: 2.0.0+up0.3.0-rc4
  - annotations:
      catalog.cattle.io/certified: rancher
      catalog.cattle.io/hidden: "true"