make: Generate manfiests and bundle with admission webhook

example/admission-webhook/deployment.yaml

@@ -3,6 +3,7 @@ kind: Deployment
 metadata:
   labels:
     app.kubernetes.io/name: prometheus-operator-admission-webhook
+    app.kubernetes.io/version: 0.54.0
   name: prometheus-operator-admission-webhook
   namespace: default
 spec:
@@ -13,37 +14,30 @@ spec:
   template:
     metadata:
       annotations:
-        kubectl.kubernetes.io/default-container: admission-webhook
+        kubectl.kubernetes.io/default-container: prometheus-operator-admission-webhook
       labels:
         app.kubernetes.io/name: prometheus-operator-admission-webhook
+        app.kubernetes.io/version: 0.54.0
     spec:
+      automountServiceAccountToken: false
       containers:
-        - ## TODO - update prior to merge
-          image: quay.io/prometheus-operator/admission-webhook:main
-          name: admission-webhook
-          ports:
-            - containerPort: 8443
-              name: https
-          resources:
-            limits:
-              cpu: 200m
-              memory: 200Mi
-            requests:
-              cpu: 50m
-              memory: 50Mi
-          readinessProbe:
-            httpGet:
-              path: /healthz
-              port: 8443
-              scheme: HTTPS
-            failureThreshold: 2
-            initialDelaySeconds: 5
-            periodSeconds: 10
-          securityContext:
-            allowPrivilegeEscalation: false
-      nodeSelector:
-        kubernetes.io/os: linux
+      - image: quay.io/prometheus-operator/prometheus-admission-webhook:v0.54.0
+        name: prometheus-operator-admission-webhook
+        ports:
+        - containerPort: 8443
+          name: https
+        resources:
+          limits:
+            cpu: 200m
+            memory: 200Mi
+          requests:
+            cpu: 50m
+            memory: 50Mi
+        securityContext:
+          allowPrivilegeEscalation: false
+          readOnlyRootFilesystem: true
+        terminationMessagePolicy: FallbackToLogsOnError
       securityContext:
         runAsNonRoot: true
         runAsUser: 65534
-      serviceAccountName: ""
+      serviceAccountName: prometheus-operator-admission-webhook

example/admission-webhook/service-account.yaml

@@ -0,0 +1,9 @@
+apiVersion: v1
+automountServiceAccountToken: false
+kind: ServiceAccount
+metadata:
+  labels:
+    app.kubernetes.io/name: prometheus-operator-admission-webhook
+    app.kubernetes.io/version: 0.54.0
+  name: prometheus-operator-admission-webhook
+  namespace: default

example/admission-webhook/service-monitor.yaml

@@ -0,0 +1,16 @@
+apiVersion: monitoring.coreos.com/v1
+kind: ServiceMonitor
+metadata:
+  labels:
+    app.kubernetes.io/name: prometheus-operator-admission-webhook
+    app.kubernetes.io/version: 0.54.0
+  name: prometheus-operator-admission-webhook
+  namespace: default
+spec:
+  endpoints:
+  - honorLabels: true
+    port: https
+  selector:
+    matchLabels:
+      app.kubernetes.io/name: prometheus-operator-admission-webhook
+      app.kubernetes.io/version: 0.54.0

example/admission-webhook/service.yaml

@@ -3,12 +3,14 @@ kind: Service
 metadata:
   labels:
     app.kubernetes.io/name: prometheus-operator-admission-webhook
+    app.kubernetes.io/version: 0.54.0
   name: prometheus-operator-admission-webhook
+  namespace: default
 spec:
   clusterIP: None
   ports:
-    - name: https
-      port: 8443
-      targetPort: https
+  - name: https
+    port: 8443
+    targetPort: https
   selector:
     app.kubernetes.io/name: prometheus-operator-admission-webhook