github.com/replicatedcom/ship@v0.50.0/integration/init/istio-1.0.3/expected/.ship/upstream/charts/galley/templates/validatingwehookconfiguration.yaml.tpl (about)

     1  {{ define "validatingwebhookconfiguration.yaml.tpl" }}
     2  apiVersion: admissionregistration.k8s.io/v1beta1
     3  kind: ValidatingWebhookConfiguration
     4  metadata:
     5    name: istio-galley
     6    namespace: {{ .Release.Namespace }}
     7    labels:
     8      app: istio-galley
     9      chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }}
    10      release: {{ .Release.Name }}
    11      heritage: {{ .Release.Service }}
    12  webhooks:
    13  {{- if .Values.global.configValidation }}
    14    - name: pilot.validation.istio.io
    15      clientConfig:
    16        service:
    17          name: istio-galley
    18          namespace: {{ .Release.Namespace }}
    19          path: "/admitpilot"
    20        caBundle: ""
    21      rules:
    22        - operations:
    23          - CREATE
    24          - UPDATE
    25          apiGroups:
    26          - config.istio.io
    27          apiVersions:
    28          - v1alpha2
    29          resources:
    30          - httpapispecs
    31          - httpapispecbindings
    32          - quotaspecs
    33          - quotaspecbindings
    34        - operations:
    35          - CREATE
    36          - UPDATE
    37          apiGroups:
    38          - rbac.istio.io
    39          apiVersions:
    40          - "*"
    41          resources:
    42          - "*"
    43        - operations:
    44          - CREATE
    45          - UPDATE
    46          apiGroups:
    47          - authentication.istio.io
    48          apiVersions:
    49          - "*"
    50          resources:
    51          - "*"
    52        - operations:
    53          - CREATE
    54          - UPDATE
    55          apiGroups:
    56          - networking.istio.io
    57          apiVersions:
    58          - "*"
    59          resources:
    60          - destinationrules
    61          - envoyfilters
    62          - gateways
    63          - serviceentries
    64          - virtualservices
    65      failurePolicy: Fail
    66    - name: mixer.validation.istio.io
    67      clientConfig:
    68        service:
    69          name: istio-galley
    70          namespace: {{ .Release.Namespace }}
    71          path: "/admitmixer"
    72        caBundle: ""
    73      rules:
    74        - operations:
    75          - CREATE
    76          - UPDATE
    77          apiGroups:
    78          - config.istio.io
    79          apiVersions:
    80          - v1alpha2
    81          resources:
    82          - rules
    83          - attributemanifests
    84          - circonuses
    85          - deniers
    86          - fluentds
    87          - kubernetesenvs
    88          - listcheckers
    89          - memquotas
    90          - noops
    91          - opas
    92          - prometheuses
    93          - rbacs
    94          - servicecontrols
    95          - solarwindses
    96          - stackdrivers
    97          - cloudwatches
    98          - dogstatsds
    99          - statsds
   100          - stdios
   101          - apikeys
   102          - authorizations
   103          - checknothings
   104          # - kuberneteses
   105          - listentries
   106          - logentries
   107          - metrics
   108          - quotas
   109          - reportnothings
   110          - servicecontrolreports
   111          - tracespans
   112      failurePolicy: Fail
   113  {{- end }}
   114  {{- end }}