istio.io/istio@v0.0.0-20240520182934-d79c90f27776/istioctl/pkg/checkinject/testdata/check-inject/never-match-injector.yaml (about)

     1  apiVersion: admissionregistration.k8s.io/v1
     2  kind: MutatingWebhookConfiguration
     3  metadata:
     4    labels:
     5      app: sidecar-injector
     6      install.operator.istio.io/owning-resource-namespace: istio-system
     7      istio.io/rev: default
     8      operator.istio.io/component: Pilot
     9      operator.istio.io/managed: Reconcile
    10      operator.istio.io/version: 1.15.1
    11      release: istio
    12    name: istio-sidecar-injector-deactivated
    13  webhooks:
    14    - admissionReviewVersions:
    15        - v1beta1
    16        - v1
    17      clientConfig:
    18        service:
    19          name: istiod
    20          namespace: istio-system
    21          path: /inject
    22          port: 443
    23      failurePolicy: Fail
    24      matchPolicy: Equivalent
    25      name: rev.namespace.sidecar-injector.istio.io
    26      namespaceSelector:
    27        matchLabels:
    28          istio.io/deactivated: never-match
    29      objectSelector:
    30        matchLabels:
    31          istio.io/deactivated: never-match
    32      reinvocationPolicy: Never
    33      rules:
    34        - apiGroups:
    35            - ""
    36          apiVersions:
    37            - v1
    38          operations:
    39            - CREATE
    40          resources:
    41            - pods
    42          scope: '*'
    43      sideEffects: None
    44      timeoutSeconds: 10
    45    - admissionReviewVersions:
    46        - v1beta1
    47        - v1
    48      clientConfig:
    49        service:
    50          name: istiod
    51          namespace: istio-system
    52          path: /inject
    53          port: 443
    54      failurePolicy: Fail
    55      matchPolicy: Equivalent
    56      name: rev.object.sidecar-injector.istio.io
    57      namespaceSelector:
    58        matchLabels:
    59          istio.io/deactivated: never-match
    60      objectSelector:
    61        matchLabels:
    62          istio.io/deactivated: never-match
    63      reinvocationPolicy: Never
    64      rules:
    65        - apiGroups:
    66            - ""
    67          apiVersions:
    68            - v1
    69          operations:
    70            - CREATE
    71          resources:
    72            - pods
    73          scope: '*'
    74      sideEffects: None
    75      timeoutSeconds: 10
    76    - admissionReviewVersions:
    77        - v1beta1
    78        - v1
    79      clientConfig:
    80        service:
    81          name: istiod
    82          namespace: istio-system
    83          path: /inject
    84          port: 443
    85      failurePolicy: Fail
    86      matchPolicy: Equivalent
    87      name: namespace.sidecar-injector.istio.io
    88      namespaceSelector:
    89        matchLabels:
    90          istio.io/deactivated: never-match
    91      objectSelector:
    92        matchLabels:
    93          istio.io/deactivated: never-match
    94      reinvocationPolicy: Never
    95      rules:
    96        - apiGroups:
    97            - ""
    98          apiVersions:
    99            - v1
   100          operations:
   101            - CREATE
   102          resources:
   103            - pods
   104          scope: '*'
   105      sideEffects: None
   106      timeoutSeconds: 10
   107    - admissionReviewVersions:
   108        - v1beta1
   109        - v1
   110      clientConfig:
   111        service:
   112          name: istiod
   113          namespace: istio-system
   114          path: /inject
   115          port: 443
   116      failurePolicy: Fail
   117      matchPolicy: Equivalent
   118      name: object.sidecar-injector.istio.io
   119      namespaceSelector:
   120        matchLabels:
   121          istio.io/deactivated: never-match
   122      objectSelector:
   123        matchLabels:
   124          istio.io/deactivated: never-match
   125      reinvocationPolicy: Never
   126      rules:
   127        - apiGroups:
   128            - ""
   129          apiVersions:
   130            - v1
   131          operations:
   132            - CREATE
   133          resources:
   134            - pods
   135          scope: '*'
   136      sideEffects: None
   137      timeoutSeconds: 10