github.com/oam-dev/kubevela@v1.9.11/charts/vela-core/templates/admission-webhooks/validatingWebhookConfiguration.yaml (about)

     1  {{- if .Values.admissionWebhooks.enabled -}}
     2  apiVersion: admissionregistration.k8s.io/v1
     3  kind: ValidatingWebhookConfiguration
     4  metadata:
     5    name: {{ template "kubevela.fullname" . }}-admission
     6    namespace: {{ .Release.Namespace }}
     7    {{- if .Values.admissionWebhooks.certManager.enabled }}
     8    annotations:
     9      cert-manager.io/inject-ca-from: {{ printf "%s/%s-root-cert" .Release.Namespace (include "kubevela.fullname" .) | quote }}
    10    {{- end }}
    11  webhooks:
    12    - clientConfig:
    13        caBundle: Cg==
    14        service:
    15          name: {{ template "kubevela.name" . }}-webhook
    16          namespace: {{ .Release.Namespace }}
    17          path: /validating-core-oam-dev-v1alpha2-traitdefinitions
    18      {{- if .Values.admissionWebhooks.patch.enabled  }}
    19      failurePolicy: Ignore
    20      {{- else }}
    21      failurePolicy: {{ .Values.admissionWebhooks.failurePolicy }}
    22      {{- end }}
    23      name: validating.core.oam.dev.v1alpha2.traitdefinitions
    24      sideEffects: None
    25      admissionReviewVersions:
    26        - v1beta1
    27        - v1
    28      rules:
    29        - apiGroups:
    30            - core.oam.dev
    31          apiVersions:
    32            - v1beta1
    33          operations:
    34            - CREATE
    35            - UPDATE
    36          resources:
    37            - traitdefinitions
    38          scope: Cluster
    39      timeoutSeconds: 5
    40    - clientConfig:
    41        caBundle: Cg==
    42        service:
    43          name: {{ template "kubevela.name" . }}-webhook
    44          namespace: {{ .Release.Namespace }}
    45          path: /validating-core-oam-dev-v1beta1-applications
    46      {{- if .Values.admissionWebhooks.patch.enabled  }}
    47      failurePolicy: Ignore
    48      {{- else }}
    49      failurePolicy: {{ .Values.admissionWebhooks.failurePolicy }}
    50      {{- end }}
    51      name: validating.core.oam.dev.v1beta1.applications
    52      admissionReviewVersions:
    53        - v1beta1
    54        - v1
    55      sideEffects: None
    56      rules:
    57        - apiGroups:
    58            - core.oam.dev
    59          apiVersions:
    60            - v1beta1
    61          operations:
    62            - CREATE
    63            - UPDATE
    64          resources:
    65            - applications
    66    - clientConfig:
    67        caBundle: Cg==
    68        service:
    69          name: {{ template "kubevela.name" . }}-webhook
    70          namespace: {{ .Release.Namespace }}
    71          path: /validating-core-oam-dev-v1beta1-componentdefinitions
    72      {{- if .Values.admissionWebhooks.patch.enabled  }}
    73      failurePolicy: Ignore
    74      {{- else }}
    75      failurePolicy: Fail
    76      {{- end }}
    77      name: validating.core.oam-dev.v1beta1.componentdefinitions
    78      sideEffects: None
    79      admissionReviewVersions:
    80        - v1beta1
    81        - v1
    82      rules:
    83        - apiGroups:
    84            - core.oam.dev
    85          apiVersions:
    86            - v1beta1
    87          operations:
    88            - CREATE
    89            - UPDATE
    90          resources:
    91            - componentdefinitions
    92    - clientConfig:
    93        caBundle: Cg==
    94        service:
    95          name: {{ template "kubevela.name" . }}-webhook
    96          namespace: {{ .Release.Namespace }}
    97          path: /validating-core-oam-dev-v1beta1-policydefinitions
    98      {{- if .Values.admissionWebhooks.patch.enabled  }}
    99      failurePolicy: Ignore
   100      {{- else }}
   101      failurePolicy: Fail
   102      {{- end }}
   103      name: validating.core.oam-dev.v1beta1.policydefinitions
   104      sideEffects: None
   105      admissionReviewVersions:
   106        - v1beta1
   107        - v1
   108      rules:
   109        - apiGroups:
   110            - core.oam.dev
   111          apiVersions:
   112            - v1beta1
   113          operations:
   114            - CREATE
   115            - UPDATE
   116          resources:
   117            - policydefinitions
   118  {{- end -}}