agones.dev/agones@v1.53.0/install/helm/agones/templates/extensions.yaml

# Copyright 2018 Google LLC All Rights Reserved.
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
#     http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
{{- $ca := genCA "admission-controller-ca" 3650 }}
{{- $cn := printf "agones-controller-service" }}
{{- $altName1 := printf "agones-controller-service.%s"  .Release.Namespace }}
{{- $altName2 := printf "agones-controller-service.%s.svc" .Release.Namespace }}
{{- $cert := genSignedCert $cn nil (list $altName1 $altName2) 3650 $ca }}
---
{{- if .Values.agones.registerApiService }}
apiVersion: apiregistration.k8s.io/v1
kind: APIService
metadata:
  name: v1.allocation.agones.dev
  labels:
    component: controller
    app: {{ template "agones.name" . }}
    chart: {{ template "agones.chart" . }}
    release: {{ .Release.Name }}
    heritage: {{ .Release.Service }}
{{- $annotations := default .Values.agones.controller.allocationApiService.annotations .Values.agones.extensions.allocationApiService.annotations }}
{{- if $annotations }}
  annotations:
{{- toYaml $annotations | nindent 4 }}
{{- end }}
spec:
  group: allocation.agones.dev
  groupPriorityMinimum: 1000
  versionPriority: 15
  service:
    name: agones-controller-service
    namespace: {{ .Release.Namespace }}
{{- if not (default .Values.agones.controller.allocationApiService.disableCaBundle .Values.agones.extensions.allocationApiService.disableCaBundle) }}
{{- if .Values.agones.controller.generateTLS }}
  caBundle: {{ b64enc $ca.Cert }}
{{- else }}
  caBundle: {{ default (.Files.Get "certs/server.crt") .Values.agones.controller.tlsCert | b64enc }}
{{- end }}
{{- end }}
  version: v1
{{- end}}
{{- if .Values.agones.registerWebhooks }}
---
apiVersion: admissionregistration.k8s.io/v1
kind: ValidatingWebhookConfiguration
metadata:
  name: agones-validation-webhook
{{- if (default .Values.agones.controller.validatingWebhook.annotations .Values.agones.extensions.validatingWebhook.annotations) }}
  annotations:
{{- toYaml .Values.agones.controller.validatingWebhook.annotations | nindent 4 }}
{{- end }}
  labels:
    component: controller
    app: {{ template "agones.name" . }}
    chart: {{ template "agones.chart" . }}
    release: {{ .Release.Name }}
    heritage: {{ .Release.Service }}
webhooks:
  - name: validations.agones.dev
    admissionReviewVersions:
      - v1
    sideEffects: None
    failurePolicy: Fail
    clientConfig:
      service:
        name: agones-controller-service
        namespace: {{ .Release.Namespace }}
        path: /validate
{{- if not (default .Values.agones.controller.validatingWebhook.disableCaBundle .Values.agones.extensions.validatingWebhook.disableCaBundle) }}
{{- if .Values.agones.controller.generateTLS }}
      caBundle: {{ b64enc $ca.Cert }}
{{- else }}
      caBundle: {{ default (.Files.Get "certs/server.crt") .Values.agones.controller.tlsCert | b64enc }}
{{- end }}
{{- end }}
    rules:
      - apiGroups:
          - agones.dev
        resources:
          - "fleets"
          - "gameservers"
          - "gameserversets"
        apiVersions:
          - "v1"
        operations:
          - CREATE
      - apiGroups:
          - agones.dev
        resources:
          - "fleets"
          - "gameserversets"
        apiVersions:
          - "v1"
        operations:
          - UPDATE
      - apiGroups:
          - autoscaling.agones.dev
        resources:
          - "fleetautoscalers"
        apiVersions:
          - "v1"
        operations:
          - CREATE
          - UPDATE

---
apiVersion: admissionregistration.k8s.io/v1
kind: MutatingWebhookConfiguration
metadata:
  name: agones-mutation-webhook
{{- $annotations := default .Values.agones.controller.mutatingWebhook.annotations .Values.agones.extensions.mutatingWebhook.annotations }}
{{- if $annotations }}
  annotations:
{{- toYaml $annotations | nindent 4 }}
{{- end }}
  labels:
    component: controller
    app: {{ template "agones.name" . }}
    chart: {{ template "agones.chart" . }}
    release: {{ .Release.Name }}
    heritage: {{ .Release.Service }}
webhooks:
  - name: mutations.agones.dev
    admissionReviewVersions:
      - v1
    sideEffects: None
    failurePolicy: Fail
    clientConfig:
      service:
        name: agones-controller-service
        namespace: {{ .Release.Namespace }}
        path: /mutate
{{- if not (default .Values.agones.controller.mutatingWebhook.disableCaBundle .Values.agones.extensions.mutatingWebhook.disableCaBundle) }}
{{- if .Values.agones.controller.generateTLS }}
      caBundle: {{ b64enc $ca.Cert }}
{{- else }}
      caBundle: {{ default (.Files.Get "certs/server.crt") .Values.agones.controller.tlsCert | b64enc }}
{{- end }}
{{- end }}
    rules:
      - apiGroups:
          - agones.dev
        resources:
          - "gameservers"
          - "fleets"
        apiVersions:
          - "v1"
        operations:
          - CREATE
      - apiGroups:
          - autoscaling.agones.dev
        resources:
          - "fleetautoscalers"
        apiVersions:
          - "v1"
        operations:
          - CREATE
          - UPDATE
{{- end }}
{{- if not (default .Values.agones.controller.disableSecret .Values.agones.extensions.disableSecret) }}
---
apiVersion: admissionregistration.k8s.io/v1
kind: MutatingWebhookConfiguration
metadata:
  name: zzz-agones-mutation-webhook
{{- $annotations := default .Values.agones.controller.mutatingWebhook.annotations .Values.agones.extensions.mutatingWebhook.annotations }}
{{- if $annotations }}
  annotations:
{{- toYaml $annotations | nindent 4 }}
{{- end }}
  labels:
    component: controller
    app: {{ template "agones.name" . }}
    chart: {{ template "agones.chart" . }}
    release: {{ .Release.Name }}
    heritage: {{ .Release.Service }}
webhooks:
  - name: mutations.agones.dev
    admissionReviewVersions:
      - v1
    sideEffects: None
    failurePolicy: Fail
    clientConfig:
      service:
        name: agones-controller-service
        namespace: {{ .Release.Namespace }}
        path: /mutate
{{- if not .Values.agones.controller.mutatingWebhook.disableCaBundle }}
{{- if .Values.agones.controller.generateTLS }}
      caBundle: {{ b64enc $ca.Cert }}
{{- else }}
      caBundle: {{ default (.Files.Get "certs/server.crt") .Values.agones.controller.tlsCert | b64enc }}
{{- end }}
{{- end }}
    objectSelector:
      matchLabels:
        agones.dev/port: "autopilot-passthrough"
    rules:
      - apiGroups:
          - ""
        resources:
          - "pods"
        apiVersions:
          - "v1"
        operations:
          - CREATE
{{- end }}
{{- if not .Values.agones.controller.disableSecret }}
---
apiVersion: v1
kind: Secret
metadata:
  name: {{ template "agones.fullname" . }}-cert
  namespace: {{ .Release.Namespace }}
  labels:
    app: {{ template "agones.name" . }}
    chart: "{{ .Chart.Name }}-{{ .Chart.Version }}"
    release: "{{ .Release.Name }}"
    heritage: "{{ .Release.Service }}"
type: Opaque
data:
{{- if .Values.agones.controller.generateTLS }}
  server.crt: {{ b64enc $cert.Cert }}
  server.key: {{ b64enc $cert.Key }}
{{- else }}
  server.crt: {{ default (.Files.Get "certs/server.crt") .Values.agones.controller.tlsCert | b64enc }}
  server.key: {{ default (.Files.Get "certs/server.key") .Values.agones.controller.tlsKey | b64enc }}
{{- end }}
{{- end }}