Make webhook fail policy configurable (#124)

This patch makes the webhook fail policy configurable. --------- Signed-off-by: Kevin Fox <[email protected]>
2023-03-15 12:55:07 -07:00
parent 9ccbd3c67f
commit 2e3f045826
3 changed files with 6 additions and 2 deletions
@@ -10,7 +10,7 @@ webhooks:
        name: {{ include "spire-controller-manager.fullname" . }}-webhook
        namespace: {{ include "spire-server.namespace" . }}
        path: /validate-spire-spiffe-io-v1alpha1-clusterfederatedtrustdomain
-    failurePolicy: Fail
+    failurePolicy: {{ .Values.controllerManager.validatingWebhookConfiguration.failurePolicy }}
    name: vclusterfederatedtrustdomain.kb.io
    rules:
      - apiGroups: ["spire.spiffe.io"]
@@ -24,7 +24,7 @@ webhooks:
        name: {{ include "spire-controller-manager.fullname" . }}-webhook
        namespace: {{ include "spire-server.namespace" . }}
        path: /validate-spire-spiffe-io-v1alpha1-clusterspiffeid
-    failurePolicy: Fail
+    failurePolicy: {{ .Values.controllerManager.validatingWebhookConfiguration.failurePolicy }}
    name: vclusterspiffeid.kb.io
    rules:
      - apiGroups: ["spire.spiffe.io"]