1apiVersion: admissionregistration.k8s.io/v1
2kind: MutatingWebhookConfiguration
3metadata:
4 name: edge-injector
5 annotations:
6 cert-manager.io/inject-ca-from: edge-injector/edge-injector
7webhooks:
8- name: couchuser.datasync.edge.ncr.com
9 admissionReviewVersions:
10 - v1
11 clientConfig:
12 service:
13 name: edge-injector
14 namespace: edge-injector
15 port: 443
16 path: /mutating-create-update-pod-couchdb-secret
17 failurePolicy: Fail
18 objectSelector:
19 matchExpressions:
20 - key: injector.edge.ncr.com/couchdb-user
21 operator: Exists
22 rules:
23 - resources: ["pods"]
24 apiGroups: [""]
25 apiVersions: ["v1"]
26 operations: ["CREATE", "UPDATE"]
27 scope: "*"
28 sideEffects: None
29- name: device-system.edge.ncr.com-daemonset
30 admissionReviewVersions: ["v1"]
31 clientConfig:
32 service:
33 name: edge-injector
34 namespace: edge-injector
35 path: "/resourcerequest-daemonset"
36 failurePolicy: Fail
37 objectSelector:
38 matchLabels:
39 device-system.edge.ncr.com/injection: "enabled"
40 rules:
41 - resources: ["daemonsets"]
42 apiGroups: ["apps"]
43 apiVersions: ["v1"]
44 operations:
45 - "CREATE"
46 - "UPDATE"
47 sideEffects: None
48- name: device-system.edge.ncr.com-deployment
49 admissionReviewVersions: ["v1"]
50 clientConfig:
51 service:
52 name: edge-injector
53 namespace: edge-injector
54 path: "/resourcerequest-deployment"
55 failurePolicy: Fail
56 objectSelector:
57 matchLabels:
58 device-system.edge.ncr.com/injection: "enabled"
59 rules:
60 - resources: ["deployments"]
61 apiGroups: ["apps"]
62 apiVersions: ["v1"]
63 operations:
64 - "CREATE"
65 - "UPDATE"
66 sideEffects: None
67- name: device-system.edge.ncr.com-pods
68 admissionReviewVersions:
69 - v1
70 clientConfig:
71 service:
72 name: edge-injector
73 namespace: edge-injector
74 port: 443
75 path: "/resourcerequest-pods"
76 failurePolicy: Fail
77 objectSelector:
78 matchLabels:
79 kubevirt.io: virt-launcher
80 rules:
81 - resources: ["pods"]
82 apiGroups: [""]
83 apiVersions: ["v1"]
84 operations: ["CREATE", "UPDATE"]
85 scope: "*"
86 sideEffects: None
87- name: device-system.edge.ncr.com-statefulset
88 admissionReviewVersions: ["v1"]
89 clientConfig:
90 service:
91 name: edge-injector
92 namespace: edge-injector
93 path: "/resourcerequest-statefulset"
94 failurePolicy: Fail
95 objectSelector:
96 matchLabels:
97 device-system.edge.ncr.com/injection: "enabled"
98 rules:
99 - resources: ["statefulsets"]
100 apiGroups: ["apps"]
101 apiVersions: ["v1"]
102 operations:
103 - "CREATE"
104 - "UPDATE"
105 sideEffects: None
106- name: node.dsds.edge.ncr.com
107 admissionReviewVersions:
108 - v1
109 clientConfig:
110 service:
111 name: edge-injector
112 namespace: edge-injector
113 port: 443
114 path: /mutating-create-update-pod-node-secret
115 failurePolicy: Fail
116 objectSelector:
117 matchExpressions:
118 - key: injector.edge.ncr.com/add-node-information
119 operator: Exists
120 rules:
121 - resources: ["pods"]
122 apiGroups: [""]
123 apiVersions: ["v1"]
124 operations: ["CREATE", "UPDATE"]
125 scope: "*"
126 sideEffects: None
127---
128apiVersion: admissionregistration.k8s.io/v1
129kind: ValidatingWebhookConfiguration
130metadata:
131 name: edge-injector
132 annotations:
133 cert-manager.io/inject-ca-from: edge-injector/edge-injector
134webhooks:
135- name: "device-class.device-system.edge.ncr.com-deviceclasses"
136 admissionReviewVersions: ["v1"]
137 clientConfig:
138 service:
139 name: edge-injector
140 namespace: edge-injector
141 port: 443
142 path: /device-class-validation-deviceclasses
143 rules:
144 - resources: ["deviceclasses"]
145 apiGroups: ["device-system.edge.ncr.com"]
146 apiVersions: ["v1"]
147 operations:
148 - "CREATE"
149 - "UPDATE"
150 scope: "*"
151 sideEffects: None
152 timeoutSeconds: 5
153- name: "device-class.device-system.edge.ncr.com-devicesets"
154 admissionReviewVersions: ["v1"]
155 clientConfig:
156 service:
157 name: edge-injector
158 namespace: edge-injector
159 port: 443
160 path: /device-class-validation-devicesets
161 rules:
162 - resources: ["devicesets"]
163 apiGroups: ["device-system.edge.ncr.com"]
164 apiVersions: ["v1"]
165 operations:
166 - "CREATE"
167 - "UPDATE"
168 scope: "*"
169 sideEffects: None
170 timeoutSeconds: 5
View as plain text