sigs.k8s.io/kubebuilder/v3@v3.14.0/pkg/plugins/golang/v2/scaffolds/internal/templates/config/kdefault/enablecainection_patch.go (about)

     1  /*
     2  Copyright 2019 The Kubernetes Authors.
     3  
     4  Licensed under the Apache License, Version 2.0 (the "License");
     5  you may not use this file except in compliance with the License.
     6  You may obtain a copy of the License at
     7  
     8      http://www.apache.org/licenses/LICENSE-2.0
     9  
    10  Unless required by applicable law or agreed to in writing, software
    11  distributed under the License is distributed on an "AS IS" BASIS,
    12  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
    13  See the License for the specific language governing permissions and
    14  limitations under the License.
    15  */
    16  
    17  package kdefault
    18  
    19  import (
    20  	"path/filepath"
    21  
    22  	"sigs.k8s.io/kubebuilder/v3/pkg/machinery"
    23  )
    24  
    25  var _ machinery.Template = &WebhookCAInjectionPatch{}
    26  
    27  // WebhookCAInjectionPatch scaffolds a file that defines the patch that adds annotation to webhooks
    28  type WebhookCAInjectionPatch struct {
    29  	machinery.TemplateMixin
    30  }
    31  
    32  // SetTemplateDefaults implements file.Template
    33  func (f *WebhookCAInjectionPatch) SetTemplateDefaults() error {
    34  	if f.Path == "" {
    35  		f.Path = filepath.Join("config", "default", "webhookcainjection_patch.yaml")
    36  	}
    37  
    38  	f.TemplateBody = injectCAPatchTemplate
    39  
    40  	f.IfExistsAction = machinery.Error
    41  
    42  	return nil
    43  }
    44  
    45  const injectCAPatchTemplate = `# This patch add annotation to admission webhook config and
    46  # the variables $(CERTIFICATE_NAMESPACE) and $(CERTIFICATE_NAME) will be substituted by kustomize.
    47  apiVersion: admissionregistration.k8s.io/v1beta1
    48  kind: MutatingWebhookConfiguration
    49  metadata:
    50    name: mutating-webhook-configuration
    51    annotations:
    52      cert-manager.io/inject-ca-from: $(CERTIFICATE_NAMESPACE)/$(CERTIFICATE_NAME)
    53  ---
    54  apiVersion: admissionregistration.k8s.io/v1beta1
    55  kind: ValidatingWebhookConfiguration
    56  metadata:
    57    name: validating-webhook-configuration
    58    annotations:
    59      cert-manager.io/inject-ca-from: $(CERTIFICATE_NAMESPACE)/$(CERTIFICATE_NAME)
    60  `