github.com/verrazzano/verrazzano@v1.7.0/platform-operator/thirdparty/charts/ingress-nginx/templates/admission-webhooks/job-patch/job-createSecret.yaml (about) 1 {{- if and .Values.controller.admissionWebhooks.enabled .Values.controller.admissionWebhooks.patch.enabled (not .Values.controller.admissionWebhooks.certManager.enabled) -}} 2 apiVersion: batch/v1 3 kind: Job 4 metadata: 5 name: {{ include "ingress-nginx.fullname" . }}-admission-create 6 namespace: {{ .Release.Namespace }} 7 annotations: 8 "helm.sh/hook": pre-install,pre-upgrade 9 "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded 10 {{- with .Values.controller.admissionWebhooks.annotations }} 11 {{- toYaml . | nindent 4 }} 12 {{- end }} 13 labels: 14 {{- include "ingress-nginx.labels" . | nindent 4 }} 15 app.kubernetes.io/component: admission-webhook 16 {{- with .Values.controller.admissionWebhooks.patch.labels }} 17 {{- toYaml . | nindent 4 }} 18 {{- end }} 19 spec: 20 {{- if .Capabilities.APIVersions.Has "batch/v1alpha1" }} 21 # Alpha feature since k8s 1.12 22 ttlSecondsAfterFinished: 0 23 {{- end }} 24 template: 25 metadata: 26 name: {{ include "ingress-nginx.fullname" . }}-admission-create 27 {{- if .Values.controller.admissionWebhooks.patch.podAnnotations }} 28 annotations: {{ toYaml .Values.controller.admissionWebhooks.patch.podAnnotations | nindent 8 }} 29 {{- end }} 30 labels: 31 {{- include "ingress-nginx.labels" . | nindent 8 }} 32 app.kubernetes.io/component: admission-webhook 33 {{- with .Values.controller.admissionWebhooks.patch.labels }} 34 {{- toYaml . | nindent 8 }} 35 {{- end }} 36 spec: 37 {{- if .Values.controller.admissionWebhooks.patch.priorityClassName }} 38 priorityClassName: {{ .Values.controller.admissionWebhooks.patch.priorityClassName }} 39 {{- end }} 40 {{- if .Values.imagePullSecrets }} 41 imagePullSecrets: {{ toYaml .Values.imagePullSecrets | nindent 8 }} 42 {{- end }} 43 containers: 44 - name: create 45 {{- with .Values.controller.admissionWebhooks.patch.image }} 46 image: "{{- if .repository -}}{{ .repository }}{{ else }}{{ .registry }}/{{ .image }}{{- end -}}:{{ .tag }}{{- if (.digest) -}} @{{.digest}} {{- end -}}" 47 {{- end }} 48 imagePullPolicy: {{ .Values.controller.admissionWebhooks.patch.image.pullPolicy }} 49 args: 50 - create 51 - --host={{ include "ingress-nginx.controller.fullname" . }}-admission,{{ include "ingress-nginx.controller.fullname" . }}-admission.$(POD_NAMESPACE).svc 52 - --namespace=$(POD_NAMESPACE) 53 - --secret-name={{ include "ingress-nginx.fullname" . }}-admission 54 env: 55 - name: POD_NAMESPACE 56 valueFrom: 57 fieldRef: 58 fieldPath: metadata.namespace 59 {{- if .Values.controller.admissionWebhooks.extraEnvs }} 60 {{- toYaml .Values.controller.admissionWebhooks.extraEnvs | nindent 12 }} 61 {{- end }} 62 {{- if .Values.controller.admissionWebhooks.createSecretJob.securityContext }} 63 securityContext: {{ toYaml .Values.controller.admissionWebhooks.createSecretJob.securityContext | nindent 12 }} 64 {{- end }} 65 {{- if .Values.controller.admissionWebhooks.createSecretJob.resources }} 66 resources: {{ toYaml .Values.controller.admissionWebhooks.createSecretJob.resources | nindent 12 }} 67 {{- end }} 68 restartPolicy: OnFailure 69 serviceAccountName: {{ include "ingress-nginx.fullname" . }}-admission 70 {{- if .Values.controller.admissionWebhooks.patch.nodeSelector }} 71 nodeSelector: {{ toYaml .Values.controller.admissionWebhooks.patch.nodeSelector | nindent 8 }} 72 {{- end }} 73 {{- if .Values.controller.admissionWebhooks.patch.tolerations }} 74 tolerations: {{ toYaml .Values.controller.admissionWebhooks.patch.tolerations | nindent 8 }} 75 {{- end }} 76 {{- if .Values.controller.admissionWebhooks.patch.securityContext }} 77 securityContext: 78 {{- toYaml .Values.controller.admissionWebhooks.patch.securityContext | nindent 8 }} 79 {{- end }} 80 {{- end }}