istio.io/istio@v0.0.0-20240520182934-d79c90f27776/samples/ambient-argo/tag-chart/templates/validatingwebhook.yaml (about)

     1  {{- if .Values.global.configValidation }}
     2  {{- if hasKey .Values.base.tags "default" }}
     3  {{- $tag := .Values.base.tags.default }}
     4  apiVersion: admissionregistration.k8s.io/v1
     5  kind: ValidatingWebhookConfiguration
     6  metadata:
     7    name: istiod-default-validator
     8    labels:
     9      app: istiod
    10      istio: istiod
    11      istio.io/rev: {{ $tag.revision | default "default" }}
    12      istio.io/tag: "default"
    13      # Required to make sure this resource is removed
    14      # when purging Istio resources
    15      operator.istio.io/component: Pilot
    16  webhooks:
    17    - name: validation.istio.io
    18      clientConfig:
    19        {{- if $tag.validationURL }}
    20        url: {{ $tag.validationURL }}
    21        {{- else }}
    22        service:
    23          name: istiod{{- if not (eq $tag.revision "") }}-{{ $tag.revision }}{{- end }}
    24          namespace: {{ .Values.global.istioNamespace }}
    25          path: "/validate"
    26        {{- end }}
    27      rules:
    28        - operations:
    29            - CREATE
    30            - UPDATE
    31          apiGroups:
    32            - security.istio.io
    33            - networking.istio.io
    34            - telemetry.istio.io
    35          apiVersions:
    36            - "*"
    37          resources:
    38            - "*"
    39      failurePolicy: Ignore
    40      sideEffects: None
    41      admissionReviewVersions: ["v1beta1", "v1"]
    42      objectSelector:
    43        matchExpressions:
    44          - key: istio.io/rev
    45            operator: DoesNotExist
    46  ---
    47  {{- end }}
    48  {{- end }}