github.com/oam-dev/kubevela@v1.9.11/charts/vela-core/templates/admission-webhooks/job-patch/job-patchWebhook.yaml (about)

     1  {{- if and .Values.admissionWebhooks.enabled .Values.admissionWebhooks.patch.enabled (not .Values.admissionWebhooks.certManager.enabled) }}
     2  apiVersion: batch/v1
     3  kind: Job
     4  metadata:
     5    name:  {{ template "kubevela.fullname" . }}-admission-patch
     6    namespace: {{ .Release.Namespace }}
     7    annotations:
     8      "helm.sh/hook": post-install,post-upgrade
     9      "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded
    10    labels:
    11      app: {{ template "kubevela.name" . }}-admission-patch
    12      {{- include "kubevela.labels" . | nindent 4 }}
    13  spec:
    14    {{- if .Capabilities.APIVersions.Has "batch/v1alpha1" }}
    15    # Alpha feature since k8s 1.12
    16    ttlSecondsAfterFinished: 0
    17    {{- end }}
    18    template:
    19      metadata:
    20        name:  {{ template "kubevela.fullname" . }}-admission-patch
    21        labels:
    22          app: {{ template "kubevela.name" . }}-admission-patch
    23          {{- include "kubevela.labels" . | nindent 8 }}
    24      spec:
    25        {{- with .Values.imagePullSecrets }}
    26        imagePullSecrets:
    27        {{- toYaml . | nindent 8 }}
    28        {{- end }}
    29        containers:
    30          - name: patch
    31            image: {{ .Values.imageRegistry }}{{ .Values.admissionWebhooks.patch.image.repository }}:{{ .Values.admissionWebhooks.patch.image.tag }}
    32            imagePullPolicy: {{ .Values.admissionWebhooks.patch.image.pullPolicy }}
    33            args:
    34              - patch
    35              - --webhook-name={{ template "kubevela.fullname" . }}-admission
    36              - --namespace={{ .Release.Namespace }}
    37              - --secret-name={{ template "kubevela.fullname" . }}-admission
    38              - --patch-failure-policy={{ .Values.admissionWebhooks.failurePolicy }}
    39              {{- if .Values.admissionWebhooks.appConversion.enabled }}
    40              - --crds={"name":"applications.core.oam.dev","conversion":{"strategy":"Webhook","webhook":{"clientConfig":{"service":{"name":"vela-core-webhook","namespace":"vela-system","path":"/convert","port":443}},"conversionReviewVersions":["v1beta1","v1alpha2"]}}}
    41              {{- end }}
    42        restartPolicy: OnFailure
    43        serviceAccountName: {{ template "kubevela.fullname" . }}-admission
    44        {{- with .Values.admissionWebhooks.patch.affinity }}
    45        affinity:
    46  {{ toYaml . | indent 8 }}
    47        {{- end }}
    48        {{- with .Values.admissionWebhooks.patch.tolerations }}
    49        tolerations:
    50  {{ toYaml . | indent 8 }}
    51        {{- end }}
    52        securityContext:
    53          runAsGroup: 2000
    54          runAsNonRoot: true
    55          runAsUser: 2000
    56  {{- end }}