istio.io/istio@v0.0.0-20240520182934-d79c90f27776/istioctl/pkg/checkinject/testdata/check-inject/default-injector.yaml (about)

     1  apiVersion: admissionregistration.k8s.io/v1
     2  kind: MutatingWebhookConfiguration
     3  metadata:
     4    labels:
     5      app: sidecar-injector
     6      install.operator.istio.io/owning-resource: example-istiocontrolplane
     7      install.operator.istio.io/owning-resource-namespace: istio-system
     8      istio.io/rev: default
     9      operator.istio.io/component: Pilot
    10      operator.istio.io/managed: Reconcile
    11      operator.istio.io/version: 1.14.0
    12      release: istio
    13    name: istio-sidecar-injector
    14  webhooks:
    15    - admissionReviewVersions:
    16        - v1beta1
    17        - v1
    18      clientConfig:
    19        service:
    20          name: istiod
    21          namespace: istio-system
    22          path: /inject
    23          port: 443
    24      failurePolicy: Fail
    25      matchPolicy: Equivalent
    26      name: rev.namespace.sidecar-injector.istio.io
    27      namespaceSelector:
    28        matchExpressions:
    29          - key: istio.io/rev
    30            operator: In
    31            values:
    32              - default
    33          - key: istio-injection
    34            operator: DoesNotExist
    35      objectSelector:
    36        matchExpressions:
    37          - key: sidecar.istio.io/inject
    38            operator: NotIn
    39            values:
    40              - "false"
    41      reinvocationPolicy: Never
    42      rules:
    43        - apiGroups:
    44            - ""
    45          apiVersions:
    46            - v1
    47          operations:
    48            - CREATE
    49          resources:
    50            - pods
    51          scope: '*'
    52      sideEffects: None
    53      timeoutSeconds: 10
    54    - admissionReviewVersions:
    55        - v1beta1
    56        - v1
    57      clientConfig:
    58        service:
    59          name: istiod
    60          namespace: istio-system
    61          path: /inject
    62          port: 443
    63      failurePolicy: Fail
    64      matchPolicy: Equivalent
    65      name: rev.object.sidecar-injector.istio.io
    66      namespaceSelector:
    67        matchExpressions:
    68          - key: istio.io/rev
    69            operator: DoesNotExist
    70          - key: istio-injection
    71            operator: DoesNotExist
    72      objectSelector:
    73        matchExpressions:
    74          - key: sidecar.istio.io/inject
    75            operator: NotIn
    76            values:
    77              - "false"
    78          - key: istio.io/rev
    79            operator: In
    80            values:
    81              - default
    82      reinvocationPolicy: Never
    83      rules:
    84        - apiGroups:
    85            - ""
    86          apiVersions:
    87            - v1
    88          operations:
    89            - CREATE
    90          resources:
    91            - pods
    92          scope: '*'
    93      sideEffects: None
    94      timeoutSeconds: 10
    95    - admissionReviewVersions:
    96        - v1beta1
    97        - v1
    98      clientConfig:
    99        service:
   100          name: istiod
   101          namespace: istio-system
   102          path: /inject
   103          port: 443
   104      failurePolicy: Fail
   105      matchPolicy: Equivalent
   106      name: namespace.sidecar-injector.istio.io
   107      namespaceSelector:
   108        matchExpressions:
   109          - key: istio-injection
   110            operator: In
   111            values:
   112              - enabled
   113      objectSelector:
   114        matchExpressions:
   115          - key: sidecar.istio.io/inject
   116            operator: NotIn
   117            values:
   118              - "false"
   119      reinvocationPolicy: Never
   120      rules:
   121        - apiGroups:
   122            - ""
   123          apiVersions:
   124            - v1
   125          operations:
   126            - CREATE
   127          resources:
   128            - pods
   129          scope: '*'
   130      sideEffects: None
   131      timeoutSeconds: 10
   132    - admissionReviewVersions:
   133        - v1beta1
   134        - v1
   135      clientConfig:
   136        service:
   137          name: istiod
   138          namespace: istio-system
   139          path: /inject
   140          port: 443
   141      failurePolicy: Fail
   142      matchPolicy: Equivalent
   143      name: object.sidecar-injector.istio.io
   144      namespaceSelector:
   145        matchExpressions:
   146          - key: istio-injection
   147            operator: DoesNotExist
   148          - key: istio.io/rev
   149            operator: DoesNotExist
   150      objectSelector:
   151        matchExpressions:
   152          - key: sidecar.istio.io/inject
   153            operator: In
   154            values:
   155              - "true"
   156          - key: istio.io/rev
   157            operator: DoesNotExist
   158      reinvocationPolicy: Never
   159      rules:
   160        - apiGroups:
   161            - ""
   162          apiVersions:
   163            - v1
   164          operations:
   165            - CREATE
   166          resources:
   167            - pods
   168          scope: '*'
   169      sideEffects: None
   170      timeoutSeconds: 10