github.com/Racer159/jackal@v0.32.7-0.20240401174413-0bd2339e4f2e/examples/component-webhooks/pepr-module-cb5693ef-d13c-5fe1-b5ad-c870fd911b3b.yaml (about)

     1  apiVersion: v1
     2  kind: Namespace
     3  metadata:
     4    name: pepr-system
     5  ---
     6  apiVersion: rbac.authorization.k8s.io/v1
     7  kind: ClusterRole
     8  metadata:
     9    name: pepr-cb5693ef-d13c-5fe1-b5ad-c870fd911b3b
    10  rules:
    11    - apiGroups:
    12        - '*'
    13      resources:
    14        - '*'
    15      verbs:
    16        - create
    17        - delete
    18        - get
    19        - list
    20        - patch
    21        - update
    22        - watch
    23  ---
    24  apiVersion: rbac.authorization.k8s.io/v1
    25  kind: ClusterRoleBinding
    26  metadata:
    27    name: pepr-cb5693ef-d13c-5fe1-b5ad-c870fd911b3b
    28  roleRef:
    29    apiGroup: rbac.authorization.k8s.io
    30    kind: ClusterRole
    31    name: pepr-cb5693ef-d13c-5fe1-b5ad-c870fd911b3b
    32  subjects:
    33    - kind: ServiceAccount
    34      name: pepr-cb5693ef-d13c-5fe1-b5ad-c870fd911b3b
    35      namespace: pepr-system
    36  ---
    37  apiVersion: v1
    38  kind: ServiceAccount
    39  metadata:
    40    name: pepr-cb5693ef-d13c-5fe1-b5ad-c870fd911b3b
    41    namespace: pepr-system
    42  ---
    43  apiVersion: v1
    44  kind: Secret
    45  metadata:
    46    name: pepr-cb5693ef-d13c-5fe1-b5ad-c870fd911b3b-api-token
    47    namespace: pepr-system
    48  type: Opaque
    49  data:
    50    value: >-
    51      NTkwMzFlMGU3MzJmYTg0ZjE5OTlmZGMzMWExZjY0MWUwZDAyYWMzZjE0NzU2MTUyMmFmYTAzMmI1YzRjM2M2Yg==
    52  ---
    53  apiVersion: v1
    54  kind: Secret
    55  metadata:
    56    name: pepr-cb5693ef-d13c-5fe1-b5ad-c870fd911b3b-tls
    57    namespace: pepr-system
    58  type: kubernetes.io/tls
    59  data:
    60    tls.crt: >-
    61      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
    62    tls.key: >-
    63      LS0tLS1CRUdJTiBSU0EgUFJJVkFURSBLRVktLS0tLQ0KTUlJRXBBSUJBQUtDQVFFQW9hWnJaTzh4R0F1d3gzOXFERkdlUWNQR0hYOVgvaEsyQjRaRUVyNVYxWXhKOUllMA0KMU15cEk1eFBLZWp5QjhTZXN3SlU1aXFQTXp0c1lQVTZLbVA0VW9Va3NpbU5tTXdZWEdBWjRBalNsVHhLTXdhcA0KemFUZ21CTEozYzcyOStwRXhtL2VQQ01qRnovTXR0elVCL2NrcXg0RDFleHF6dTNOV0Z3ZGJnTlE0SEdMbmNwTw0Ka0lMeFdWR0Y5dnJvdWs1UUNmS2lJTjdwMSs3N2dmSzdmcFdmL1luaGd2TENreXJNUDZ4Z3NGakNTcmh1THF4VQ0KNWJLS1ZpcURCN0Y5T2dxY3lwOURXZWZReFdTZ0IzLzhSQ2tUN1hubmtTcjJSR1RHcWVsejE1Rkp3NXMxZVZ5Lw0KSHpIczJHWVVhVkJnSWRjQmdpQ1VrNHdyZm41NnlEeXc3RWo5Q3dJREFRQUJBb0lCQURLeDUxSkROVWxPT1VXSA0KYnZHb0V4S2EzQ0hhRXZWcVZzM3JUS1A0THlFR214Ym1ERThFVkRNSHpVZmVkekQ2ZDY2NkYzZ0xkdGRoVm03ZA0KMlR6OEZ4K0NBKzBmM1BsRFlJeHYwdzJRbHNJWW8waDNXWDlWcXQzbVhvcUNZcStETjhobnd2Rm5MNVVWL0JTSg0KRXJIZ3p3NGZIcUxUUHZmZ1doclE0S1hrd2xOd3FOQWRLS2grR29JK0h5NkZHNFhORWhoNXdLc052VGQ1YXVnVg0KUDVRbXptRUhIajdhQTU4WmE4cFdrZUU3VVBxTnRjYnBrR3dLOVJZdFlBSzd2bDEyTHdwT1M4Vm4zKzZHMGRKWA0KcXhhQ080QmZ0UEpHYTFsbENUa2RtSlJMcm5BZE8zZVhuRS94OEhpUlR3d25vMDlTNi9iL3krZXgrQ0twcC8vaA0KdGZ1cThCa0NnWUVBd1hxc29mOTlJUjhHL05ZS2lEWkNKWmMxSnJkQ011bzdNYUtINENUT09ReG1XZEo4dHM5OQ0Ka1VwZVE1NU5oWXJSRXZFNVpCcEkvR29YUmxWNFFHbjdlRWdJdUNmcGRsVXp0a2xkbWp2cGd1UXZ4RnhGSXlpUg0KRUpGb1IxbmVPWkd0YjNScFp3ekF2VXdQY05XdTlHN2ZvUUF0MG01VEhxcm02eDl4OTNFRW9aVUNnWUVBMWVLNA0KaG1UNFg2L2dhOHpZL0IveWFLNmFpdFhDVTczdFdvYWVsdFBUbWh5VDVxMFZHUjJINXZrY3I5L3JqREZ0ajdoZQ0KZS8yblM1SEtpem8zaDZmb2JLSm9icUEzdFFYWkpZUGZsQU9zVVBnMTJ4YkRXaXJJQ0dBamxoRG9zMDIvQzVrNA0KbVM3WnFIeGNVdEk4ZitjTmdjbzdLZnRNZ2dOdnhRekFjQm5RdkI4Q2dZRUFzcUhzbVhVbHRsckxQTXp4MUdraw0KRVVqV0RmVE03ZTFNMGJyWjhKeUt1aWswcG1Hc082eStwbElmVGhidVJBbXlsdWFZc2srQ2Eyb1lLeHZtZHJKag0KTnQ1ckRudnJGUkg5T0tQc0ErYWs1ZkNBR2ErSE5iclNsSlZyemRTdlZEK24vV3RobFg4MHhKRmhBRENKNDZ3cQ0KVkoreHJzT2xnbjhQeksydnIyRnRnVEVDZ1lFQWx2UXk0N2R6aktVbXNTNmNuaVUyQXlmb0xzQjdMSHRKZjdDdg0KVVNnam1nczlYM3NjL3VMV3ZlOW5qY0Z1RHozN1k0bnVOWGhxa0cxUEZFQjhYS1BtNkhVZlc2UjhiS2k1L3o0NQ0KbDgrWDJIVzJIUERONDE5NldsN3Yvc1BrV0ZndzA5REtIMkx2ZjNoMStJWWs2T2g3b2ZUSEdQUWhwVWtqbzJGQw0KbUZ1LzlHVUNnWUJIellZdXZRd011c1ArSndBbWJ1d3NXMWthbllmTTY4OVcvcUpOYXBEQTc2UEJPbWljQ05tdw0KSWdMMTh4bjZCcStWQkFETWQzb1ZzNFFuNWM2TXg2SkVERHAwT09pazVrNjhpQTZHK084L2pRaVR1STZLNWNUSw0KQzgxalhsSWo0QzgxWUlCRWxPS3d4LzUyeGxhM0lRbDJ5QWVKWlhUVWx4WUdxMjc0KzdCT1F3PT0NCi0tLS0tRU5EIFJTQSBQUklWQVRFIEtFWS0tLS0tDQo=
    64  ---
    65  apiVersion: apps/v1
    66  kind: Deployment
    67  metadata:
    68    name: pepr-cb5693ef-d13c-5fe1-b5ad-c870fd911b3b
    69    namespace: pepr-system
    70    labels:
    71      app: pepr-cb5693ef-d13c-5fe1-b5ad-c870fd911b3b
    72  spec:
    73    replicas: 2
    74    selector:
    75      matchLabels:
    76        app: pepr-cb5693ef-d13c-5fe1-b5ad-c870fd911b3b
    77    template:
    78      metadata:
    79        labels:
    80          app: pepr-cb5693ef-d13c-5fe1-b5ad-c870fd911b3b
    81      spec:
    82        priorityClassName: system-node-critical
    83        serviceAccountName: pepr-cb5693ef-d13c-5fe1-b5ad-c870fd911b3b
    84        containers:
    85          - name: server
    86            image: ghcr.io/defenseunicorns/pepr/controller:v0.15.0
    87            imagePullPolicy: IfNotPresent
    88            command:
    89              - node
    90              - /app/node_modules/pepr/dist/controller.js
    91              - b947b4974c9919a3983673269d19f548e2d8a99db04d9401a53eb9f0bcc71ff0
    92            readinessProbe:
    93              httpGet:
    94                path: /healthz
    95                port: 3000
    96                scheme: HTTPS
    97            livenessProbe:
    98              httpGet:
    99                path: /healthz
   100                port: 3000
   101                scheme: HTTPS
   102            ports:
   103              - containerPort: 3000
   104            resources:
   105              requests:
   106                memory: 64Mi
   107                cpu: 100m
   108              limits:
   109                memory: 256Mi
   110                cpu: 500m
   111            env:
   112              - name: PEPR_PRETTY_LOG
   113                value: 'false'
   114              - name: LOG_LEVEL
   115                value: debug
   116            volumeMounts:
   117              - name: tls-certs
   118                mountPath: /etc/certs
   119                readOnly: true
   120              - name: api-token
   121                mountPath: /app/api-token
   122                readOnly: true
   123              - name: module
   124                mountPath: /app/load
   125                readOnly: true
   126        volumes:
   127          - name: tls-certs
   128            secret:
   129              secretName: pepr-cb5693ef-d13c-5fe1-b5ad-c870fd911b3b-tls
   130          - name: api-token
   131            secret:
   132              secretName: pepr-cb5693ef-d13c-5fe1-b5ad-c870fd911b3b-api-token
   133          - name: module
   134            secret:
   135              secretName: pepr-cb5693ef-d13c-5fe1-b5ad-c870fd911b3b-module
   136  ---
   137  apiVersion: v1
   138  kind: Service
   139  metadata:
   140    name: pepr-cb5693ef-d13c-5fe1-b5ad-c870fd911b3b
   141    namespace: pepr-system
   142  spec:
   143    selector:
   144      app: pepr-cb5693ef-d13c-5fe1-b5ad-c870fd911b3b
   145    ports:
   146      - port: 443
   147        targetPort: 3000
   148  ---
   149  apiVersion: v1
   150  kind: Service
   151  metadata:
   152    name: pepr-cb5693ef-d13c-5fe1-b5ad-c870fd911b3b-watcher
   153    namespace: pepr-system
   154  spec:
   155    selector:
   156      app: pepr-cb5693ef-d13c-5fe1-b5ad-c870fd911b3b-watcher
   157    ports:
   158      - port: 443
   159        targetPort: 3000
   160  ---
   161  apiVersion: v1
   162  kind: Secret
   163  metadata:
   164    name: pepr-cb5693ef-d13c-5fe1-b5ad-c870fd911b3b-module
   165    namespace: pepr-system
   166  type: Opaque
   167  data:
   168    module-b947b4974c9919a3983673269d19f548e2d8a99db04d9401a53eb9f0bcc71ff0.js.gz: >-
   169      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
   170  ---
   171  apiVersion: apiextensions.k8s.io/v1
   172  kind: CustomResourceDefinition
   173  metadata:
   174    name: peprstores.pepr.dev
   175  spec:
   176    group: pepr.dev
   177    versions:
   178      - name: v1
   179        served: true
   180        storage: true
   181        schema:
   182          openAPIV3Schema:
   183            type: object
   184            properties:
   185              data:
   186                type: object
   187                additionalProperties:
   188                  type: string
   189    scope: Namespaced
   190    names:
   191      plural: peprstores
   192      singular: peprstore
   193      kind: PeprStore
   194  ---
   195  apiVersion: rbac.authorization.k8s.io/v1
   196  kind: Role
   197  metadata:
   198    name: pepr-cb5693ef-d13c-5fe1-b5ad-c870fd911b3b-store
   199    namespace: pepr-system
   200  rules:
   201    - apiGroups:
   202        - pepr.dev
   203      resources:
   204        - peprstores
   205      resourceNames:
   206        - ''
   207      verbs:
   208        - create
   209        - get
   210        - patch
   211        - watch
   212  ---
   213  apiVersion: rbac.authorization.k8s.io/v1
   214  kind: RoleBinding
   215  metadata:
   216    name: pepr-cb5693ef-d13c-5fe1-b5ad-c870fd911b3b-store
   217    namespace: pepr-system
   218  roleRef:
   219    apiGroup: rbac.authorization.k8s.io
   220    kind: Role
   221    name: pepr-cb5693ef-d13c-5fe1-b5ad-c870fd911b3b-store
   222  subjects:
   223    - kind: ServiceAccount
   224      name: pepr-cb5693ef-d13c-5fe1-b5ad-c870fd911b3b-store
   225      namespace: pepr-system
   226  ---
   227  apiVersion: admissionregistration.k8s.io/v1
   228  kind: MutatingWebhookConfiguration
   229  metadata:
   230    name: pepr-cb5693ef-d13c-5fe1-b5ad-c870fd911b3b
   231  webhooks:
   232    - name: pepr-cb5693ef-d13c-5fe1-b5ad-c870fd911b3b.pepr.dev
   233      admissionReviewVersions:
   234        - v1
   235        - v1beta1
   236      clientConfig:
   237        caBundle: >-
   238          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
   239        service:
   240          name: pepr-cb5693ef-d13c-5fe1-b5ad-c870fd911b3b
   241          namespace: pepr-system
   242          path: >-
   243            /mutate/59031e0e732fa84f1999fdc31a1f641e0d02ac3f147561522afa032b5c4c3c6b
   244      failurePolicy: Ignore
   245      matchPolicy: Equivalent
   246      timeoutSeconds: 10
   247      namespaceSelector:
   248        matchExpressions:
   249          - key: pepr.dev
   250            operator: NotIn
   251            values:
   252              - ignore
   253          - key: kubernetes.io/metadata.name
   254            operator: NotIn
   255            values:
   256              - kube-system
   257              - pepr-system
   258      objectSelector:
   259        matchExpressions:
   260          - key: pepr.dev
   261            operator: NotIn
   262            values:
   263              - ignore
   264          - key: kubernetes.io/metadata.name
   265            operator: NotIn
   266            values:
   267              - kube-system
   268              - pepr-system
   269      rules:
   270        - apiGroups:
   271            - ''
   272          apiVersions:
   273            - v1
   274          operations:
   275            - CREATE
   276            - UPDATE
   277          resources:
   278            - secrets
   279      sideEffects: None