1apiVersion: admissionregistration.k8s.io/v1
2kind: MutatingWebhookConfiguration
3metadata:
4 name: "cloud-pvl-admission.k8s.io"
5 labels:
6 addonmanager.kubernetes.io/mode: Reconcile
7 k8s-app: cloud-pvl-admission
8webhooks:
9- name: "cloud-pvl-admission.k8s.io"
10 rules:
11 - apiGroups: [""]
12 apiVersions: ["v1"]
13 operations: ["CREATE"]
14 resources: ["persistentvolumes"]
15 scope: "*"
16 clientConfig:
17 url: "https://127.0.0.1:9001/admit"
18 caBundle: "__CLOUD_PVL_ADMISSION_CA_CERT__"
19 matchConditions:
20 - name: "only-gce"
21 expression: "has(object.spec.gcePersistentDisk)"
22 admissionReviewVersions: ["v1"]
23 sideEffects: None
24 timeoutSeconds: 5
25 failurePolicy: Fail
View as plain text