-
Notifications
You must be signed in to change notification settings - Fork 33
/
manifest.yaml
80 lines (80 loc) · 3.53 KB
/
manifest.yaml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
---
apiVersion: v1
kind: Service
metadata:
name: grumpy
namespace: default
labels:
name: grumpy
spec:
ports:
- name: webhook
port: 443
targetPort: 8080
selector:
name: grumpy
---
apiVersion: apps/v1beta1
kind: Deployment
metadata:
name: grumpy
namespace: default
labels:
name: grumpy
spec:
replicas: 1
template:
metadata:
name: grumpy
labels:
name: grumpy
spec:
containers:
- name: webhook
image: quay.io/giantswarm/grumpy:1.0.0
imagePullPolicy: Always
args:
- -alsologtostderr
- --log_dir=/
- -v=10
- 2>&1
resources:
limits:
memory: 50Mi
cpu: 300m
requests:
memory: 00Mi
cpu: 300m
volumeMounts:
- name: webhook-certs
mountPath: /etc/certs
readOnly: true
- name: logs
mountPath: /tmp
securityContext:
readOnlyRootFilesystem: true
volumes:
- name: webhook-certs
secret:
secretName: grumpy
- name: logs
emptyDir: {}
---
apiVersion: admissionregistration.k8s.io/v1beta1
kind: ValidatingWebhookConfiguration
metadata:
name: grumpy
webhooks:
- name: grumpy.giantswarm.org
clientConfig:
service:
name: grumpy
namespace: default
path: "/validate"
caBundle: "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"
rules:
- operations: ["CREATE","UPDATE"]
apiGroups: [""]
apiVersions: ["v1"]
resources: ["pods"]
failurePolicy: Ignore