-
Notifications
You must be signed in to change notification settings - Fork 829
/
webhooks.yaml
105 lines (105 loc) · 2.74 KB
/
webhooks.yaml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
apiVersion: admissionregistration.k8s.io/v1
kind: MutatingWebhookConfiguration
metadata:
name: defaulting.webhook.provisioners.karpenter.sh
namespace: {{ .Release.Namespace }}
labels:
{{- include "karpenter.labels" . | nindent 4 }}
{{- with .Values.additionalAnnotations }}
annotations:
{{- toYaml . | nindent 4 }}
{{- end }}
webhooks:
- name: defaulting.webhook.provisioners.karpenter.sh
admissionReviewVersions: ["v1"]
clientConfig:
service:
name: {{ include "karpenter.fullname" . }}
namespace: {{ .Release.Namespace }}
failurePolicy: Fail
sideEffects: None
rules:
- apiGroups:
- karpenter.k8s.aws
apiVersions:
- v1alpha1
operations:
- CREATE
- UPDATE
- DELETE
resources:
- awsnodetemplates
- awsnodetemplates/status
scope: '*'
- apiGroups:
- karpenter.sh
apiVersions:
- v1alpha5
resources:
- provisioners
- provisioners/status
operations:
- CREATE
- UPDATE
- DELETE
---
apiVersion: admissionregistration.k8s.io/v1
kind: ValidatingWebhookConfiguration
metadata:
name: validation.webhook.provisioners.karpenter.sh
namespace: {{ .Release.Namespace }}
labels:
{{- include "karpenter.labels" . | nindent 4 }}
webhooks:
- name: validation.webhook.provisioners.karpenter.sh
admissionReviewVersions: ["v1"]
clientConfig:
service:
name: {{ include "karpenter.fullname" . }}
namespace: {{ .Release.Namespace }}
failurePolicy: Fail
sideEffects: None
rules:
- apiGroups:
- karpenter.k8s.aws
apiVersions:
- v1alpha1
operations:
- CREATE
- UPDATE
- DELETE
resources:
- awsnodetemplates
- awsnodetemplates/status
scope: '*'
- apiGroups:
- karpenter.sh
apiVersions:
- v1alpha5
resources:
- provisioners
- provisioners/status
operations:
- CREATE
- UPDATE
- DELETE
---
apiVersion: admissionregistration.k8s.io/v1
kind: ValidatingWebhookConfiguration
metadata:
name: validation.webhook.config.karpenter.sh
namespace: {{ .Release.Namespace }}
labels:
{{- include "karpenter.labels" . | nindent 4 }}
webhooks:
- name: validation.webhook.config.karpenter.sh
admissionReviewVersions: ["v1"]
clientConfig:
service:
name: {{ include "karpenter.fullname" . }}
namespace: {{ .Release.Namespace }}
failurePolicy: Fail
sideEffects: None
objectSelector:
matchLabels:
app.kubernetes.io/part-of: {{ template "karpenter.name" . }}