openstack-operator/bindata/operator/openstack-baremetal-operator-webhooks.yaml at 62715b26f99829b3c2789688c6fe893ec4aec2ab · openstack-k8s-operators/openstack-operator · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
apiVersion: v1
kind: Service
metadata:
  labels:
    app.kubernetes.io/component: webhook
    app.kubernetes.io/created-by: openstack-operator
    app.kubernetes.io/instance: webhook-service
    app.kubernetes.io/managed-by: kustomize
    app.kubernetes.io/name: openstack-baremetal-operator
    app.kubernetes.io/part-of: openstack-baremetal-operator
  name: openstack-baremetal-operator-webhook-service
  namespace: '{{ .OperatorNamespace }}'
spec:
  ports:
  - port: 443
    protocol: TCP
    targetPort: 9443
  selector:
    app.kubernetes.io/name: openstack-baremetal-operator
    control-plane: controller-manager
---
apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
  labels:
    app.kubernetes.io/component: certificate
    app.kubernetes.io/created-by: openstack-operator
    app.kubernetes.io/instance: serving-cert
    app.kubernetes.io/managed-by: kustomize
    app.kubernetes.io/name: openstack-baremetal-operator
  name: openstack-baremetal-operator-serving-cert
  namespace: '{{ .OperatorNamespace }}'
spec:
  dnsNames:
  - openstack-baremetal-operator-webhook-service.{{ .OperatorNamespace }}.svc
  - openstack-baremetal-operator-webhook-service.{{ .OperatorNamespace }}.svc.cluster.local
  issuerRef:
    kind: Issuer
    name: openstack-baremetal-operator-selfsigned-issuer
  privateKey:
    algorithm: ECDSA
    size: 256
  secretName: openstack-baremetal-operator-webhook-server-cert
---
apiVersion: admissionregistration.k8s.io/v1
kind: MutatingWebhookConfiguration
metadata:
  annotations:
    cert-manager.io/inject-ca-from: '{{ .OperatorNamespace }}/openstack-baremetal-operator-serving-cert'
  creationTimestamp: null
  labels:
    app.kubernetes.io/component: webhook
    app.kubernetes.io/created-by: openstack-operator
    app.kubernetes.io/instance: mutating-webhook-configuration
    app.kubernetes.io/managed-by: kustomize
    app.kubernetes.io/name: mutatingwebhookconfiguration
    app.kubernetes.io/part-of: openstack-baremetal-operator
  name: openstack-baremetal-operator-mutating-webhook-configuration
webhooks:
- admissionReviewVersions:
  - v1
  failurePolicy: Fail
  name: mopenstackbaremetalset-v1beta1.kb.io
  rules:
    - apiGroups:
        - baremetal.openstack.org
      apiVersions:
      - v1beta1
      operations:
        - CREATE
        - UPDATE
      resources:
        - openstackbaremetalsets
  sideEffects: None
  clientConfig:
    service:
      name: openstack-baremetal-operator-webhook-service
      namespace: '{{ .OperatorNamespace }}'
      path: /mutate-baremetal-openstack-org-v1beta1-openstackbaremetalset
- admissionReviewVersions:
  - v1
  failurePolicy: Fail
  name: mopenstackprovisionserver-v1beta1.kb.io
  rules:
    - apiGroups:
        - baremetal.openstack.org
      apiVersions:
      - v1beta1
      operations:
        - CREATE
        - UPDATE
      resources:
        - openstackprovisionservers
  sideEffects: None
  clientConfig:
    service:
      name: openstack-baremetal-operator-webhook-service
      namespace: '{{ .OperatorNamespace }}'
      path: /mutate-baremetal-openstack-org-v1beta1-openstackprovisionserver
---
apiVersion: admissionregistration.k8s.io/v1
kind: ValidatingWebhookConfiguration
metadata:
  annotations:
    cert-manager.io/inject-ca-from: '{{ .OperatorNamespace }}/openstack-baremetal-operator-serving-cert'
  creationTimestamp: null
  labels:
    app.kubernetes.io/component: webhook
    app.kubernetes.io/created-by: openstack-operator
    app.kubernetes.io/instance: validating-webhook-configuration
    app.kubernetes.io/managed-by: kustomize
    app.kubernetes.io/name: validatingwebhookconfiguration
    app.kubernetes.io/part-of: openstack-baremetal-operator
  name: openstack-baremetal-operator-validating-webhook-configuration
webhooks:
- admissionReviewVersions:
  - v1
  failurePolicy: Fail
  name: vopenstackbaremetalset-v1beta1.kb.io
  rules:
    - apiGroups:
        - baremetal.openstack.org
      apiVersions:
      - v1beta1
      operations:
        - CREATE
        - UPDATE
      resources:
        - openstackbaremetalsets
  sideEffects: None
  clientConfig:
    service:
      name: openstack-baremetal-operator-webhook-service
      namespace: '{{ .OperatorNamespace }}'
      path: /validate-baremetal-openstack-org-v1beta1-openstackbaremetalset
- admissionReviewVersions:
  - v1
  failurePolicy: Fail
  name: vopenstackprovisionserver-v1beta1.kb.io
  rules:
    - apiGroups:
        - baremetal.openstack.org
      apiVersions:
      - v1beta1
      operations:
        - CREATE
        - UPDATE
      resources:
        - openstackprovisionservers
  sideEffects: None
  clientConfig:
    service:
      name: openstack-baremetal-operator-webhook-service
      namespace: '{{ .OperatorNamespace }}'
      path: /validate-baremetal-openstack-org-v1beta1-openstackprovisionserver