mirror of
https://github.com/kyverno/kyverno.git
synced 2025-03-05 15:37:19 +00:00
4912f20885
TLS pair initialization functionality moved to init.go. Separated server and mutation webhook objects, implemented registration of webhook with the creation of corresponding object. Added comments for webhook configuration definitions, changed name of configuration for debug.
21 lines
727 B
YAML
21 lines
727 B
YAML
# MutatingWebhookConfiguration document which should be used when placing controller inside the cluster
|
|
# This configuration is just an example. Webhook for in-cluster configuration is registered by controller (see webhooks/registration.go).
|
|
apiVersion: admissionregistration.k8s.io/v1beta1
|
|
kind: MutatingWebhookConfiguration
|
|
metadata:
|
|
name: nirmata-kube-policy-webhook-cfg
|
|
labels:
|
|
app: kube-policy
|
|
webhooks:
|
|
- name: webhook.nirmata.kube-policy
|
|
clientConfig:
|
|
service:
|
|
name: kube-policy-svc
|
|
namespace: default
|
|
path: "/mutate"
|
|
caBundle: ${CA_BUNDLE}
|
|
rules:
|
|
- operations: [ "CREATE" ]
|
|
resources: [ "*/*" ]
|
|
apiGroups: [ "*" ]
|
|
apiVersions: [ "*" ]
|