apiVersion: v1 kind: Namespace metadata: name: tolerator labels: webhook: tolerator workload.edge.ncr.com: platform platform.edge.ncr.com/component: tolerator annotations: pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z" pallet.edge.ncr.com/name: tolerator pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1 pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1 pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/sds' pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a --- apiVersion: v1 kind: ServiceAccount metadata: name: tolerator namespace: tolerator labels: app: tolerator platform.edge.ncr.com/component: tolerator annotations: pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z" pallet.edge.ncr.com/name: tolerator pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1 pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1 pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/sds' pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a --- apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: name: tolerator labels: app: tolerator platform.edge.ncr.com/component: tolerator annotations: pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z" pallet.edge.ncr.com/name: tolerator pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1 pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1 pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/sds' pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a rules: - resources: ["mutatingwebhookconfigurations"] apiGroups: ["admissionregistration.k8s.io"] verbs: ["create", "get", "delete", "list", "patch", "update", "watch"] --- apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRoleBinding metadata: name: tolerator labels: app: tolerator platform.edge.ncr.com/component: tolerator annotations: pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z" pallet.edge.ncr.com/name: tolerator pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1 pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1 pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/sds' pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a roleRef: name: tolerator kind: ClusterRole apiGroup: rbac.authorization.k8s.io subjects: - name: tolerator namespace: tolerator kind: ServiceAccount --- apiVersion: v1 kind: Service metadata: name: tolerator namespace: tolerator labels: app: tolerator platform.edge.ncr.com/component: tolerator annotations: pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z" pallet.edge.ncr.com/name: tolerator pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1 pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1 pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/sds' pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a spec: selector: app: tolerator platform.edge.ncr.com/component: tolerator ports: - port: 443 targetPort: 8443 --- apiVersion: apps/v1 kind: Deployment metadata: name: tolerator namespace: tolerator labels: app: tolerator platform.edge.ncr.com/component: tolerator annotations: pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z" pallet.edge.ncr.com/name: tolerator pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1 pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1 pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/sds' pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a spec: selector: matchLabels: app: tolerator platform.edge.ncr.com/component: tolerator template: metadata: labels: app: tolerator platform.edge.ncr.com/component: tolerator annotations: pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z" pallet.edge.ncr.com/name: tolerator pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1 pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1 pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/sds' pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a spec: serviceAccountName: tolerator containers: - name: tolerator image: us-east1-docker.pkg.dev/ret-edge-pltf-infra/workloads/tolerator@sha256:dc18625e666d0e829b91227bd0775e4b4160c0e82dfa1ae598e197114b6e6b48 args: - -service-name=tolerator ports: - containerPort: 8443 env: - name: POD_NAMESPACE valueFrom: fieldRef: fieldPath: metadata.namespace volumeMounts: - name: cert readOnly: true mountPath: "/var/cert" lifecycle: preStop: exec: command: ["/bin/sh", "-c", "/prestop.sh"] imagePullPolicy: IfNotPresent volumes: - name: cert secret: secretName: tolerator-webhook-certificate imagePullSecrets: - name: edge-docker-pull-secret --- apiVersion: cert-manager.io/v1 kind: Certificate metadata: name: tolerator-certificate namespace: tolerator labels: platform.edge.ncr.com/component: tolerator annotations: pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z" pallet.edge.ncr.com/name: tolerator pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1 pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1 pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/sds' pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a spec: dnsNames: - tolerator.tolerator.svc issuerRef: name: selfsigned secretName: tolerator-webhook-certificate --- apiVersion: cert-manager.io/v1 kind: Issuer metadata: name: selfsigned namespace: tolerator labels: platform.edge.ncr.com/component: tolerator annotations: pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z" pallet.edge.ncr.com/name: tolerator pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1 pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1 pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/sds' pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a spec: selfSigned: {} --- apiVersion: admissionregistration.k8s.io/v1 kind: MutatingWebhookConfiguration metadata: name: tolerator-webhook labels: platform.edge.ncr.com/component: tolerator annotations: cert-manager.io/inject-ca-from: tolerator/tolerator-certificate pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z" pallet.edge.ncr.com/name: tolerator pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1 pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1 pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/sds' pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a webhooks: - name: tolerator.tolerator.svc admissionReviewVersions: - v1 - v1beta1 clientConfig: service: name: tolerator namespace: tolerator port: 443 path: /inject failurePolicy: Ignore matchPolicy: Equivalent namespaceSelector: matchExpressions: - key: webhook operator: NotIn values: - tolerator objectSelector: {} reinvocationPolicy: Never rules: - resources: - pods apiGroups: - "" apiVersions: - v1 operations: - CREATE - UPDATE scope: '*' sideEffects: None