github.com/ironcore-dev/gardener-extension-provider-ironcore@v0.3.2-0.20240314231816-8336447fb9a0/example/40-validatingwebhookconfiguration.yaml (about) 1 apiVersion: admissionregistration.k8s.io/v1 2 kind: ValidatingWebhookConfiguration 3 metadata: 4 name: gardener-extension-admission-ironcore 5 webhooks: 6 - name: validation.ironcore.provider.extensions.gardener.cloud 7 rules: 8 - apiGroups: 9 - "core.gardener.cloud" 10 apiVersions: 11 - v1alpha1 12 - v1beta1 13 operations: 14 - CREATE 15 - UPDATE 16 resources: 17 - cloudprofiles 18 - secretbindings 19 - shoots 20 failurePolicy: Fail 21 # Please make sure you are running `gardener@v1.42` or later before enabling this object selector. 22 objectSelector: 23 matchLabels: 24 provider.extensions.gardener.cloud/ironcore: "true" 25 namespaceSelector: {} 26 sideEffects: None 27 admissionReviewVersions: 28 - v1 29 - v1beta1 30 clientConfig: 31 url: "https://localhost:9443/webhooks/validate" 32 caBundle: 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 33 - name: secrets.validation.ironcore.provider.extensions.gardener.cloud 34 rules: 35 - apiGroups: 36 - "" 37 apiVersions: 38 - v1 39 operations: 40 - UPDATE 41 resources: 42 - secrets 43 failurePolicy: Fail 44 objectSelector: 45 matchLabels: 46 provider.shoot.gardener.cloud/ironcore: "true" 47 namespaceSelector: {} 48 sideEffects: None 49 admissionReviewVersions: 50 - v1 51 - v1beta1 52 clientConfig: 53 service: 54 namespace: garden 55 name: gardener-extension-admission-ironcore 56 path: /webhooks/validate/secrets 57 port: 9443 58 caBundle: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUMrakNDQWVLZ0F3SUJBZ0lRWVlvRklZU2UyQjdMZEk1ODdnNHJDVEFOQmdrcWhraUc5dzBCQVFzRkFEQVgKTVJVd0V3WURWUVFERXd4bllYSmtaVzVsY2kxa1pYWXdIaGNOTWpFd01USXhNVEF6TVRFd1doY05NekV3TVRJeApNVEF6TVRFd1dqQVhNUlV3RXdZRFZRUURFd3huWVhKa1pXNWxjaTFrWlhZd2dnRWlNQTBHQ1NxR1NJYjNEUUVCCkFRVUFBNElCRHdBd2dnRUtBb0lCQVFDLy9IcEZEN3Z4clRmREp3Y3JMNW0zdUtVajVvMWw0NEtGRHFxQWg2L1AKblJQUlN3ZHR5M2YvYkQ1TVRXOUplOWsvajYrWHZwUmc3LzFLbmRkaGpObDdGUjVSejdacDF0TkVEZkJqd2pLVwpJeGRHYnRCaUcwZ1c0aDZ1aEFwcTk5aDk1NWtMQkhTVW1XUFRRZFNtQ0lEY1lnSmd6OGZXdFRQTmxVSUtaajVCCkUxSGsrazgxZjhnTGZsaXpuRkNFeUNHNHRuWm1XbXpVUXljdXdoQnpFSCt5N1QyZEgwN0VBM3V3SmFwZG5WTGMKSlhsVEUzQm1QY3RXNCs3dGM4eUNKd3BuUjlMdE51MTVtaUtWNVNKaHlTaTUzdmo5MUlFQXVOa0wrMDZMbmlOSAp4RVVnRlljUlZPOTZPcjZGSW9EYlFvZGlQbU1OWDJHaHd6bzhpMFFvNHNFakFnTUJBQUdqUWpCQU1BNEdBMVVkCkR3RUIvd1FFQXdJQnBqQVBCZ05WSFJNQkFmOEVCVEFEQVFIL01CMEdBMVVkRGdRV0JCUUJxTWdPKzJ1RG1KWHIKdUJwQ3lqaW9NbDZMTFRBTkJna3Foa2lHOXcwQkFRc0ZBQU9DQVFFQWZRZXZldzFLOXJaWStwNmlmVGhXWm9SWQo5Y3RldzdTdjlCak4vdzZrazRML1V2ZHdML0NZWkZJUWR0Tm5uSjcrMXdxT093L1NEdi9HZ2ZTUlVhTlZkbEVFCmx1S003VGhTbGl1SFVJTS9IblpLdUFxQVpFUU5LQ0RDSnFDYkplS1BGYnJKcFZqMU1Xblc2YzV5L3dTMHJxOUsKRXludVJTQnMvOVEvOVg1NVBaZjRFZnhQN29UVGY4L2pIRnJ0ODdBT2ZqUGUzYlMxV1FGdHh3NVZyWm13TC9CbgpTNXlEcUpPTDNsR0xUeG9vOGhHNS9ucDZ0NkFXOXVoM2FxQ3FsZ051MmEwUndJSTBicmVFb3NZZmhlL0NXbkxBCmxhcVNKc0kydHBjeW4zMEFQbzlpRU9JVjYwc2VET3p6VGxyMm5oa2NURFBYZ2drWktCWWFncGlrTUZobGRBPT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo=