istio.io/istio@v0.0.0-20240520182934-d79c90f27776/operator/cmd/mesh/testdata/manifest-generate/input-extra-resources/duplicate_mwc.yaml (about)

     1  apiVersion: admissionregistration.k8s.io/v1
     2  kind: MutatingWebhookConfiguration
     3  metadata:
     4    labels:
     5      app: sidecar-injector
     6      istio.io/tag: default
     7    name: w-istio-sidecar-injector-istio-system
     8    
     9  webhooks:
    10  - admissionReviewVersions:
    11    - v1beta1
    12    - v1
    13    clientConfig:
    14      service:
    15        name: istiod
    16        namespace: istio-system
    17        path: /inject
    18        port: 443
    19    failurePolicy: Fail
    20    matchPolicy: Equivalent
    21    name: rev.namespace.sidecar-injector.istio.io
    22    namespaceSelector:
    23      matchExpressions:
    24      - key: istio.io/rev
    25        operator: In
    26        values:
    27        - default
    28      - key: istio-injection
    29        operator: DoesNotExist
    30    objectSelector:
    31      matchExpressions:
    32      - key: istio.io/rev
    33        operator: NotIn
    34        values:
    35        - canary
    36    reinvocationPolicy: Never
    37    rules:
    38    - apiGroups:
    39      - ""
    40      apiVersions:
    41      - v1
    42      operations:
    43      - CREATE
    44      resources:
    45      - pods
    46      scope: '*'
    47    sideEffects: None
    48    timeoutSeconds: 10
    49  ---
    50  # same webhook but with different name, will result in a duplicate
    51  apiVersion: admissionregistration.k8s.io/v1
    52  kind: MutatingWebhookConfiguration
    53  metadata:
    54    labels:
    55      app: sidecar-injector
    56      istio.io/tag: default
    57    name: w2-istio-sidecar-injector-istio-system
    58  
    59  webhooks:
    60  - admissionReviewVersions:
    61    - v1beta1
    62    - v1
    63    clientConfig:
    64      service:
    65        name: istiod
    66        namespace: istio-system
    67        path: /inject
    68        port: 443
    69    failurePolicy: Fail
    70    matchPolicy: Equivalent
    71    name: rev.namespace.sidecar-injector.istio.io
    72    namespaceSelector:
    73      matchExpressions:
    74      - key: istio.io/rev
    75        operator: In
    76        values:
    77        - default
    78      - key: istio-injection
    79        operator: DoesNotExist
    80    objectSelector:
    81      matchExpressions:
    82      - key: istio.io/rev
    83        operator: NotIn
    84        values:
    85        - canary
    86    reinvocationPolicy: Never
    87    rules:
    88    - apiGroups:
    89      - ""
    90      apiVersions:
    91      - v1
    92      operations:
    93      - CREATE
    94      resources:
    95      - pods
    96      scope: '*'
    97    sideEffects: None
    98    timeoutSeconds: 10