sigs.k8s.io/prow@v0.0.0-20240503223140-c5e374dc7eb1/cmd/admission/dev.yaml (about)

     1  kind: Deployment
     2  apiVersion: apps/v1
     3  metadata:
     4    name: prow-admission
     5  spec:
     6    replicas: 1
     7    selector:
     8      matchLabels:
     9        app: prow-admission
    10    template:
    11      metadata:
    12        labels:
    13          app: prow-admission
    14      spec:
    15        containers:
    16        - name: admission
    17          image: gcr.io/k8s-testimages/admission:latest  # Note: not gcr.io/k8s-prow for dev
    18          imagePullPolicy: Always  # Good practice for dev/debugging, bad for prod
    19          args:
    20          - --tls-cert-file=/etc/tls/tls.crt
    21          - --tls-private-key-file=/etc/tls/tls.key
    22          ports:
    23          - containerPort: 8443
    24            name: validator-http
    25            protocol: TCP
    26          volumeMounts:
    27          - name: tls
    28            mountPath: /etc/tls
    29          livenessProbe:
    30            httpGet:
    31              path: /healthz
    32              port: 8081
    33            initialDelaySeconds: 3
    34            periodSeconds: 3
    35          readinessProbe:
    36            httpGet:
    37              path: /healthz/ready
    38              port: 8081
    39            initialDelaySeconds: 10
    40            periodSeconds: 3
    41            timeoutSeconds: 600
    42        volumes:
    43        - name: tls
    44          secret:
    45            secretName: prow-admission
    46  ---
    47  
    48  apiVersion: v1
    49  kind: Service
    50  metadata:
    51    name: prow-admission
    52  spec:
    53    ports:
    54    - port: 443
    55      protocol: TCP
    56      targetPort: 8443
    57    selector:
    58      app: prow-admission
    59    type: ClusterIP
    60  ---
    61  
    62  apiVersion: admissionregistration.k8s.io/v1beta1
    63  kind: ValidatingWebhookConfiguration
    64  metadata:
    65    name: prow-admission
    66  webhooks:
    67  - name: prowjob-validator.prow.k8s.io
    68    failurePolicy: Fail
    69    rules:
    70    - apiGroups:
    71      - prow.k8s.io
    72      apiVersions:
    73      - "*"
    74      operations:
    75      - UPDATE
    76      resources:
    77      - prowjobs
    78    clientConfig:
    79      caBundle: "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"
    80      service:
    81        name: prow-admission
    82        namespace: default
    83        path: /validate