mirror of
https://github.com/ysoftdevs/imagepullsecret-injector.git
synced 2026-03-23 09:31:44 +01:00
28 lines
951 B
YAML
28 lines
951 B
YAML
apiVersion: admissionregistration.k8s.io/v1
|
|
kind: MutatingWebhookConfiguration
|
|
metadata:
|
|
name: imagepullsecret-injector-webhook-cfg
|
|
namespace: {{ .Release.Namespace }}
|
|
labels:
|
|
app: imagepullsecret-injector
|
|
{{- include "imagepullsecret-injector.labels" . | nindent 4 }}
|
|
annotations:
|
|
cert-manager.io/inject-ca-from: {{ .Release.Namespace }}/{{ include "imagepullsecret-injector.certificateName" . }}
|
|
webhooks:
|
|
- name: imagepullsecret-injector.ysoftdevs.github.com
|
|
clientConfig:
|
|
service:
|
|
name: {{ include "imagepullsecret-injector.serviceName" . }}
|
|
namespace : {{ .Release.Namespace }}
|
|
path: "/mutate"
|
|
caBundle: "Cg=="
|
|
rules:
|
|
- operations: ["CREATE", "UPDATE"]
|
|
apiGroups: [""]
|
|
apiVersions: ["v1"]
|
|
resources: ["serviceaccounts"]
|
|
admissionReviewVersions: ["v1", "v1beta1"]
|
|
sideEffects: None
|
|
# The default "Fail" option prevents Gardener cluster to be hibernated
|
|
failurePolicy: Ignore
|