70 lines
1.9 KiB
YAML
70 lines
1.9 KiB
YAML
apiVersion: admissionregistration.k8s.io/v1
|
|
kind: ValidatingWebhookConfiguration
|
|
metadata:
|
|
annotations:
|
|
cert-manager.io/inject-ca-from: {{ .Release.Namespace }}/{{ include "kamaji.certificateName" . }}
|
|
labels:
|
|
{{- $data := . | mustMergeOverwrite (dict "instance" "validating-webhook-configuration") -}}
|
|
{{- include "kamaji.labels" $data | nindent 4 }}
|
|
name: kamaji-validating-webhook-configuration
|
|
webhooks:
|
|
- admissionReviewVersions:
|
|
- v1
|
|
clientConfig:
|
|
service:
|
|
name: {{ include "kamaji.webhookServiceName" . }}
|
|
namespace: {{ .Release.Namespace }}
|
|
path: /validate--v1-secret
|
|
failurePolicy: Ignore
|
|
name: vdatastoresecrets.kb.io
|
|
rules:
|
|
- apiGroups:
|
|
- ""
|
|
apiVersions:
|
|
- v1
|
|
operations:
|
|
- DELETE
|
|
resources:
|
|
- secrets
|
|
sideEffects: None
|
|
- admissionReviewVersions:
|
|
- v1
|
|
clientConfig:
|
|
service:
|
|
name: {{ include "kamaji.webhookServiceName" . }}
|
|
namespace: {{ .Release.Namespace }}
|
|
path: /validate-kamaji-clastix-io-v1alpha1-datastore
|
|
failurePolicy: Fail
|
|
name: vdatastore.kb.io
|
|
rules:
|
|
- apiGroups:
|
|
- kamaji.clastix.io
|
|
apiVersions:
|
|
- v1alpha1
|
|
operations:
|
|
- CREATE
|
|
- UPDATE
|
|
- DELETE
|
|
resources:
|
|
- datastores
|
|
sideEffects: None
|
|
- admissionReviewVersions:
|
|
- v1
|
|
clientConfig:
|
|
service:
|
|
name: {{ include "kamaji.webhookServiceName" . }}
|
|
namespace: {{ .Release.Namespace }}
|
|
path: /validate-kamaji-clastix-io-v1alpha1-tenantcontrolplane
|
|
failurePolicy: Fail
|
|
name: vtenantcontrolplane.kb.io
|
|
rules:
|
|
- apiGroups:
|
|
- kamaji.clastix.io
|
|
apiVersions:
|
|
- v1alpha1
|
|
operations:
|
|
- CREATE
|
|
- UPDATE
|
|
resources:
|
|
- tenantcontrolplanes
|
|
sideEffects: None |