kfox1111
1169dd5692
* Update spire-controller-manager to 0.6.2 and add its staticManifest support Signed-off-by: Kevin Fox <[email protected]> * Update docs Signed-off-by: Kevin Fox <[email protected]> * Fix indent Signed-off-by: Kevin Fox <[email protected]> --------- Signed-off-by: Kevin Fox <[email protected]>
44 lines
1.8 KiB
YAML
44 lines
1.8 KiB
YAML
{{- if not .Values.externalServer }}
|
|
{{- if eq .Values.controllerManager.staticManifestMode "off" }}
|
|
{{- if and (eq (.Values.controllerManager.enabled | toString) "true") .Values.controllerManager.validatingWebhookConfiguration.enabled }}
|
|
apiVersion: admissionregistration.k8s.io/v1
|
|
kind: ValidatingWebhookConfiguration
|
|
metadata:
|
|
name: {{ .Release.Namespace }}-{{ include "spire-controller-manager.fullname" . }}-webhook
|
|
webhooks:
|
|
- admissionReviewVersions: ["v1"]
|
|
clientConfig:
|
|
service:
|
|
name: {{ include "spire-controller-manager.fullname" . }}-webhook
|
|
namespace: {{ include "spire-server.namespace" . }}
|
|
path: /validate-spire-spiffe-io-v1alpha1-clusterfederatedtrustdomain
|
|
{{- if eq (.Values.controllerManager.installAndUpgradeHook.enabled | toString) "true" }}
|
|
failurePolicy: Ignore # Actual value to be set by post install/upgrade hooks
|
|
{{- else }}
|
|
failurePolicy: {{ .Values.controllerManager.validatingWebhookConfiguration.failurePolicy }}
|
|
{{- end }}
|
|
name: vclusterfederatedtrustdomain.kb.io
|
|
rules:
|
|
- apiGroups: ["spire.spiffe.io"]
|
|
apiVersions: ["v1alpha1"]
|
|
operations: ["CREATE", "UPDATE"]
|
|
resources: ["clusterfederatedtrustdomains"]
|
|
sideEffects: None
|
|
- admissionReviewVersions: ["v1"]
|
|
clientConfig:
|
|
service:
|
|
name: {{ include "spire-controller-manager.fullname" . }}-webhook
|
|
namespace: {{ include "spire-server.namespace" . }}
|
|
path: /validate-spire-spiffe-io-v1alpha1-clusterspiffeid
|
|
failurePolicy: Ignore # Actual value to be set by post install/upgrade hooks
|
|
name: vclusterspiffeid.kb.io
|
|
rules:
|
|
- apiGroups: ["spire.spiffe.io"]
|
|
apiVersions: ["v1alpha1"]
|
|
operations: ["CREATE", "UPDATE"]
|
|
resources: ["clusterspiffeids"]
|
|
sideEffects: None
|
|
{{- end }}
|
|
{{- end }}
|
|
{{- end }}
|