Skip to content

Commit a2d981b

Browse files
authored
fix(argo): bump targetRevision (#52)
Signed-off-by: sandert-k8s <sandert98@gmail.com>
1 parent 6aefa54 commit a2d981b

1 file changed

Lines changed: 14 additions & 14 deletions

File tree

content/en/docs/operating/setup/installation.md

Lines changed: 14 additions & 14 deletions
Original file line numberDiff line numberDiff line change
@@ -58,7 +58,7 @@ Perform the following steps to install the capsule Operator:
5858

5959
Here are some key considerations to keep in mind when installing Capsule. Also check out the **[Best Practices](/docs/operating/best-practices)** for more information.
6060

61-
### Admission Policies
61+
### Admission Policies
6262

6363
While Capsule provides a robust framework for managing multi-tenancy in Kubernetes, it does not include built-in admission policies for enforcing specific security or operational standards for all possible aspects of a Kubernetes cluster. Therefore, it is recommended to use additional tools like [Kyverno](https://kyverno.io/) to enforce admission policies that align with your organization's requirements.
6464

@@ -102,7 +102,7 @@ Or you could at least consider to set the failure policy to `Ignore`:
102102
```yaml
103103
webhooks:
104104
hooks:
105-
nodes:
105+
nodes:
106106
failurePolicy: Ignore
107107
```
108108

@@ -111,7 +111,7 @@ If you still want to use the feature, you could execlude the kube-system namespa
111111
```yaml
112112
webhooks:
113113
hooks:
114-
nodes:
114+
nodes:
115115
matchConditions:
116116
- name: 'exclude-kubelet-requests'
117117
expression: '!("system:nodes" in request.userInfo.groups)'
@@ -126,7 +126,7 @@ Namespaces are the most important resource in Capsule. The Namespace Webhook is
126126
```yaml
127127
webhooks:
128128
hooks:
129-
namespaces:
129+
namespaces:
130130
matchConditions:
131131
- name: 'exclude-kube-system'
132132
expression: '!("system:serviceaccounts:kube-system" in request.userInfo.groups)'
@@ -164,7 +164,7 @@ spec:
164164
project: system
165165
source:
166166
repoURL: ghcr.io/projectcapsule/charts
167-
targetRevision: 0.10.6
167+
targetRevision: 0.11.0
168168
chart: capsule
169169
helm:
170170
skipCrds: true
@@ -188,7 +188,7 @@ spec:
188188
- system:serviceaccounts:capsule-argo-addon
189189
webhooks:
190190
hooks:
191-
nodes:
191+
nodes:
192192
failurePolicy: Ignore
193193
serviceMonitor:
194194
enabled: true
@@ -221,15 +221,15 @@ spec:
221221
selfHeal: true
222222
syncOptions:
223223
- ServerSideApply=true
224-
- CreateNamespace=true
225-
- PrunePropagationPolicy=foreground
224+
- CreateNamespace=true
225+
- PrunePropagationPolicy=foreground
226226
- PruneLast=true
227-
- RespectIgnoreDifferences=true
227+
- RespectIgnoreDifferences=true
228228
retry:
229229
limit: 5
230230
backoff:
231-
duration: 5s
232-
factor: 2
231+
duration: 5s
232+
factor: 2
233233
maxDuration: 3m
234234
---
235235
apiVersion: v1
@@ -283,8 +283,8 @@ spec:
283283
tls:
284284
enableController: false
285285
create: false
286-
manager:
287-
options:
286+
manager:
287+
options:
288288
capsuleConfiguration: default
289289
ignoreUserGroups:
290290
- oidc:administators
@@ -293,7 +293,7 @@ spec:
293293
- system:serviceaccounts:capsule-argo-addon
294294
webhooks:
295295
hooks:
296-
nodes:
296+
nodes:
297297
failurePolicy: Ignore
298298
serviceMonitor:
299299
enabled: true

0 commit comments

Comments
 (0)