forked from rook/rook
subhamkrai
2115daa317
This commit refactor webhook config by adding/removing spaces. Also, moved the Issue and Certificate creation from bash script to webhook config yaml. Signed-off-by: subhamkrai <srai@redhat.com>
73 lines
2.3 KiB
YAML
73 lines
2.3 KiB
YAML
apiVersion: cert-manager.io/v1
|
|
kind: Issuer
|
|
metadata:
|
|
name: selfsigned-issuer
|
|
namespace: ${NAMESPACE}
|
|
spec:
|
|
selfSigned: {}
|
|
---
|
|
apiVersion: cert-manager.io/v1
|
|
kind: Certificate
|
|
metadata:
|
|
name: rook-admission-controller-cert
|
|
namespace: ${NAMESPACE}
|
|
spec:
|
|
dnsNames:
|
|
- ${SERVICE_NAME}
|
|
- ${SERVICE_NAME}.${NAMESPACE}.svc
|
|
- ${SERVICE_NAME}.${NAMESPACE}.svc.cluster.local
|
|
issuerRef:
|
|
kind: Issuer
|
|
name: selfsigned-issuer
|
|
secretName: rook-ceph-admission-controller
|
|
---
|
|
apiVersion: admissionregistration.k8s.io/v1
|
|
kind: ValidatingWebhookConfiguration
|
|
metadata:
|
|
name: ${WEBHOOK_CONFIG_NAME}
|
|
annotations:
|
|
cert-manager.io/inject-ca-from: ${NAMESPACE}/rook-admission-controller-cert
|
|
webhooks:
|
|
- name: cephcluster-wh-${SERVICE_NAME}-${NAMESPACE}.rook.io
|
|
rules:
|
|
- apiGroups: ["ceph.rook.io"]
|
|
apiVersions: ["v1"]
|
|
operations: ["CREATE", "UPDATE", "DELETE"]
|
|
resources: ["cephclusters"]
|
|
clientConfig:
|
|
service:
|
|
name: ${SERVICE_NAME}
|
|
namespace: ${NAMESPACE}
|
|
path: /validate-ceph-rook-io-v1-cephcluster
|
|
admissionReviewVersions: ["v1", "v1beta1"] # API server will try to use first version in the list which it supports.
|
|
sideEffects: None
|
|
timeoutSeconds: 5
|
|
- name: cephblockpool-wh-${SERVICE_NAME}-${NAMESPACE}.rook.io
|
|
rules:
|
|
- apiGroups: ["ceph.rook.io"]
|
|
apiVersions: ["v1"]
|
|
operations: ["CREATE", "UPDATE", "DELETE"]
|
|
resources: ["cephblockpools"]
|
|
clientConfig:
|
|
service:
|
|
name: ${SERVICE_NAME}
|
|
namespace: ${NAMESPACE}
|
|
path: /validate-ceph-rook-io-v1-cephblockpool
|
|
admissionReviewVersions: ["v1", "v1beta1"] # API server will try to use first version in the list which it supports.
|
|
sideEffects: None
|
|
timeoutSeconds: 5
|
|
- name: cephobjectstore-wh-${SERVICE_NAME}-${NAMESPACE}.rook.io
|
|
rules:
|
|
- apiGroups: ["ceph.rook.io"]
|
|
apiVersions: ["v1"]
|
|
operations: ["CREATE", "UPDATE", "DELETE"]
|
|
resources: ["cephobjectstores"]
|
|
clientConfig:
|
|
service:
|
|
name: ${SERVICE_NAME}
|
|
namespace: ${NAMESPACE}
|
|
path: /validate-ceph-rook-io-v1-cephobjectstore
|
|
admissionReviewVersions: ["v1", "v1beta1"] # API server will try to use first version in the list which it supports.
|
|
sideEffects: None
|
|
timeoutSeconds: 5
|