Faisal MemonandMarco Franssen
456075f843
Co-authored-by: Marco Franssen <[email protected]> Signed-off-by: Marco Franssen <[email protected]>
36 lines
1.4 KiB
YAML
36 lines
1.4 KiB
YAML
{{- if eq (.Values.controllerManager.enabled | toString) "true" }}
|
|
apiVersion: admissionregistration.k8s.io/v1
|
|
kind: ValidatingWebhookConfiguration
|
|
metadata:
|
|
name: {{ include "spire-controller-manager.fullname" . }}-webhook
|
|
webhooks:
|
|
- admissionReviewVersions: ["v1"]
|
|
clientConfig:
|
|
service:
|
|
name: {{ include "spire-controller-manager.fullname" . }}-webhook
|
|
namespace: {{ include "spire-server.namespace" . }}
|
|
path: /validate-spire-spiffe-io-v1alpha1-clusterfederatedtrustdomain
|
|
failurePolicy: Ignore # Actual value to be set by post install/upgrade hooks
|
|
name: vclusterfederatedtrustdomain.kb.io
|
|
rules:
|
|
- apiGroups: ["spire.spiffe.io"]
|
|
apiVersions: ["v1alpha1"]
|
|
operations: ["CREATE", "UPDATE"]
|
|
resources: ["clusterfederatedtrustdomains"]
|
|
sideEffects: None
|
|
- admissionReviewVersions: ["v1"]
|
|
clientConfig:
|
|
service:
|
|
name: {{ include "spire-controller-manager.fullname" . }}-webhook
|
|
namespace: {{ include "spire-server.namespace" . }}
|
|
path: /validate-spire-spiffe-io-v1alpha1-clusterspiffeid
|
|
failurePolicy: Ignore # Actual value to be set by post install/upgrade hooks
|
|
name: vclusterspiffeid.kb.io
|
|
rules:
|
|
- apiGroups: ["spire.spiffe.io"]
|
|
apiVersions: ["v1alpha1"]
|
|
operations: ["CREATE", "UPDATE"]
|
|
resources: ["clusterspiffeids"]
|
|
sideEffects: None
|
|
{{- end }}
|