mirror of
https://github.com/kyverno/kyverno.git
synced 2025-03-06 07:57:07 +00:00
4912f20885
TLS pair initialization functionality moved to init.go. Separated server and mutation webhook objects, implemented registration of webhook with the creation of corresponding object. Added comments for webhook configuration definitions, changed name of configuration for debug.
18 lines
668 B
YAML
18 lines
668 B
YAML
# Example of MutatingWebhookConfiguration which can be used for debug, when controller is placed on master node
|
|
# To register webhook for debug, replace ${CA_BUNDLE} with corresponding data from ~/.kube/config and create this resource
|
|
apiVersion: admissionregistration.k8s.io/v1beta1
|
|
kind: MutatingWebhookConfiguration
|
|
metadata:
|
|
name: nirmata-kube-policy-webhook-cfg-debug
|
|
labels:
|
|
app: kube-policy
|
|
webhooks:
|
|
- name: webhook.nirmata.kube-policy
|
|
clientConfig:
|
|
url: "https://localhost/mutate"
|
|
caBundle: ${CA_BUNDLE}
|
|
rules:
|
|
- operations: [ "CREATE" ]
|
|
resources: [ "*/*" ]
|
|
apiGroups: [ "*" ]
|
|
apiVersions: [ "*" ]
|