github.com/replicatedcom/ship@v0.50.0/integration/init/istio/expected/base/charts/galley/templates/configmap.yaml (about)

     1  ---
     2  # Source: istio/charts/galley/templates/configmap.yaml
     3  apiVersion: v1
     4  kind: ConfigMap
     5  metadata:
     6    name: istio-galley-configuration
     7    namespace: default
     8    labels:
     9      app: galley
    10      chart: galley
    11      heritage: Tiller
    12      release: istio
    13      istio: galley
    14  data:
    15    validatingwebhookconfiguration.yaml: |-    
    16      apiVersion: admissionregistration.k8s.io/v1beta1
    17      kind: ValidatingWebhookConfiguration
    18      metadata:
    19        name: istio-galley
    20        namespace: default
    21        labels:
    22          app: galley
    23          chart: galley
    24          heritage: Tiller
    25          release: istio
    26          istio: galley
    27      webhooks:
    28        - name: pilot.validation.istio.io
    29          clientConfig:
    30            service:
    31              name: istio-galley
    32              namespace: default
    33              path: "/admitpilot"
    34            caBundle: ""
    35          rules:
    36            - operations:
    37              - CREATE
    38              - UPDATE
    39              apiGroups:
    40              - config.istio.io
    41              apiVersions:
    42              - v1alpha2
    43              resources:
    44              - httpapispecs
    45              - httpapispecbindings
    46              - quotaspecs
    47              - quotaspecbindings
    48            - operations:
    49              - CREATE
    50              - UPDATE
    51              apiGroups:
    52              - rbac.istio.io
    53              apiVersions:
    54              - "*"
    55              resources:
    56              - "*"
    57            - operations:
    58              - CREATE
    59              - UPDATE
    60              apiGroups:
    61              - authentication.istio.io
    62              apiVersions:
    63              - "*"
    64              resources:
    65              - "*"
    66            - operations:
    67              - CREATE
    68              - UPDATE
    69              apiGroups:
    70              - networking.istio.io
    71              apiVersions:
    72              - "*"
    73              resources:
    74              - destinationrules
    75              - envoyfilters
    76              - gateways
    77              - serviceentries
    78              - virtualservices
    79          failurePolicy: Fail
    80        - name: mixer.validation.istio.io
    81          clientConfig:
    82            service:
    83              name: istio-galley
    84              namespace: default
    85              path: "/admitmixer"
    86            caBundle: ""
    87          rules:
    88            - operations:
    89              - CREATE
    90              - UPDATE
    91              apiGroups:
    92              - config.istio.io
    93              apiVersions:
    94              - v1alpha2
    95              resources:
    96              - rules
    97              - attributemanifests
    98              - circonuses
    99              - deniers
   100              - fluentds
   101              - kubernetesenvs
   102              - listcheckers
   103              - memquotas
   104              - noops
   105              - opas
   106              - prometheuses
   107              - rbacs
   108              - servicecontrols
   109              - solarwindses
   110              - stackdrivers
   111              - statsds
   112              - stdios
   113              - apikeys
   114              - authorizations
   115              - checknothings
   116              # - kuberneteses
   117              - listentries
   118              - logentries
   119              - metrics
   120              - quotas
   121              - reportnothings
   122              - servicecontrolreports
   123              - tracespans
   124          failurePolicy: Fail
   125    accesslist.yaml: |-    
   126      allowed:
   127          - spiffe://cluster.local/ns/default/sa/istio-mixer-service-account
   128          - spiffe://cluster.local/ns/default/sa/istio-pilot-service-account