mirror of
https://github.com/intel/intel-device-plugins-for-kubernetes.git
synced 2025-06-03 03:59:37 +00:00
81 lines
2.1 KiB
YAML
81 lines
2.1 KiB
YAML
namespace: intelsgxwebhook-system
|
|
|
|
namePrefix: intelsgxwebhook-
|
|
|
|
resources:
|
|
- ../../default
|
|
- ../../certmanager
|
|
|
|
patches:
|
|
# Enable certmanager integration
|
|
- path: webhookcainjection_patch.yaml
|
|
target:
|
|
name: mutating-webhook-configuration
|
|
|
|
replacements:
|
|
- source: # Add cert-manager annotation to ValidatingWebhookConfiguration, MutatingWebhookConfiguration and CRDs
|
|
kind: Certificate
|
|
group: cert-manager.io
|
|
version: v1
|
|
name: serving-cert # this name should match the one in certificate.yaml
|
|
fieldPath: .metadata.namespace # namespace of the certificate CR
|
|
targets:
|
|
- select:
|
|
kind: MutatingWebhookConfiguration
|
|
fieldPaths:
|
|
- .metadata.annotations.[cert-manager.io/inject-ca-from]
|
|
options:
|
|
delimiter: '/'
|
|
index: 0
|
|
create: true
|
|
- source:
|
|
kind: Certificate
|
|
group: cert-manager.io
|
|
version: v1
|
|
name: serving-cert # this name should match the one in certificate.yaml
|
|
fieldPath: .metadata.name
|
|
targets:
|
|
- select:
|
|
kind: MutatingWebhookConfiguration
|
|
fieldPaths:
|
|
- .metadata.annotations.[cert-manager.io/inject-ca-from]
|
|
options:
|
|
delimiter: '/'
|
|
index: 1
|
|
create: true
|
|
- source: # Add cert-manager annotation to the webhook Service
|
|
kind: Service
|
|
version: v1
|
|
name: webhook-service
|
|
fieldPath: .metadata.name # namespace of the service
|
|
targets:
|
|
- select:
|
|
kind: Certificate
|
|
group: cert-manager.io
|
|
version: v1
|
|
fieldPaths:
|
|
- .spec.dnsNames.0
|
|
- .spec.dnsNames.1
|
|
options:
|
|
delimiter: '.'
|
|
index: 0
|
|
create: true
|
|
- source:
|
|
kind: Service
|
|
version: v1
|
|
name: webhook-service
|
|
fieldPath: .metadata.namespace # namespace of the service
|
|
targets:
|
|
- select:
|
|
kind: Certificate
|
|
group: cert-manager.io
|
|
version: v1
|
|
fieldPaths:
|
|
- .spec.dnsNames.0
|
|
- .spec.dnsNames.1
|
|
options:
|
|
delimiter: '.'
|
|
index: 1
|
|
create: true
|
|
|