istio.io/istio@v0.0.0-20240520182934-d79c90f27776/manifests/charts/default/templates/validatingwebhook.yaml (about)

     1  apiVersion: admissionregistration.k8s.io/v1
     2  kind: ValidatingWebhookConfiguration
     3  metadata:
     4    name: istiod-default-validator
     5    labels:
     6      app: istiod
     7      istio: istiod
     8      istio.io/rev: {{ .Values.revision | default "default" | quote }}
     9      istio.io/tag: "default"
    10      # Required to make sure this resource is removed
    11      # when purging Istio resources
    12      operator.istio.io/component: Pilot
    13  webhooks:
    14    - name: validation.istio.io
    15      clientConfig:
    16        {{- if .Values.base.validationURL }}
    17        url: {{ .Values.base.validationURL }}
    18        {{- else }}
    19        service:
    20          name: istiod{{- if not (eq .Values.revision "") }}-{{ .Values.revision }}{{- end }}
    21          namespace: {{ .Values.global.istioNamespace }}
    22          path: "/validate"
    23        {{- end }}
    24      rules:
    25        - operations:
    26            - CREATE
    27            - UPDATE
    28          apiGroups:
    29            - security.istio.io
    30            - networking.istio.io
    31            - telemetry.istio.io
    32            - extensions.istio.io
    33          apiVersions:
    34            - "*"
    35          resources:
    36            - "*"
    37      failurePolicy: Ignore
    38      sideEffects: None
    39      admissionReviewVersions: ["v1beta1", "v1"]
    40      objectSelector:
    41        matchExpressions:
    42          - key: istio.io/rev
    43            operator: DoesNotExist
    44  ---