github.com/SamarSidharth/kpt@v0.0.0-20231122062228-c7d747ae3ace/package-examples/cert-manager-basic/webhook/mutatingwebhookconfiguration-cert-manager-webhook.yaml (about)

     1  # Source: cert-manager/templates/webhook-mutating-webhook.yaml
     2  apiVersion: admissionregistration.k8s.io/v1
     3  kind: MutatingWebhookConfiguration
     4  metadata:
     5    name: cert-manager-webhook
     6    labels:
     7      app: webhook
     8      app.kubernetes.io/name: webhook
     9      app.kubernetes.io/instance: cert-manager
    10      app.kubernetes.io/component: "webhook"
    11      app.kubernetes.io/version: "v1.8.2"
    12    annotations:
    13      cert-manager.io/inject-ca-from-secret: "cert-manager/cert-manager-webhook-ca"
    14  webhooks:
    15    - name: webhook.cert-manager.io
    16      rules:
    17        - apiGroups:
    18            - "cert-manager.io"
    19            - "acme.cert-manager.io"
    20          apiVersions:
    21            - "v1"
    22          operations:
    23            - CREATE
    24            - UPDATE
    25          resources:
    26            - "*/*"
    27      admissionReviewVersions: ["v1"]
    28      # This webhook only accepts v1 cert-manager resources.
    29      # Equivalent matchPolicy ensures that non-v1 resource requests are sent to
    30      # this webhook (after the resources have been converted to v1).
    31      matchPolicy: Equivalent
    32      timeoutSeconds: 10
    33      failurePolicy: Fail
    34      # Only include 'sideEffects' field in Kubernetes 1.12+
    35      sideEffects: None
    36      clientConfig:
    37        service:
    38          name: cert-manager-webhook
    39          namespace: "cert-manager"
    40          path: /mutate
    41