From a19045419dffd802f0413c34aae6e8c041487fb8 Mon Sep 17 00:00:00 2001
From: Dario Tranchitella <dario@tranchitella.eu>
Date: Mon, 21 Jun 2021 13:25:02 +0200
Subject: [PATCH] build(kustomize): webhook for Namespace handling when tenant
 is freezed

---
 config/webhook/manifests.yaml         | 21 +++++++++++++++++++++
 config/webhook/patch_ns_selector.yaml | 17 ++++++++++++++++-
 2 files changed, 37 insertions(+), 1 deletion(-)

diff --git a/config/webhook/manifests.yaml b/config/webhook/manifests.yaml
index c435fe43..0beeb553 100644
--- a/config/webhook/manifests.yaml
+++ b/config/webhook/manifests.yaml
@@ -93,6 +93,27 @@ webhooks:
     resources:
     - ingresses
   sideEffects: None
+- admissionReviewVersions:
+  - v1
+  clientConfig:
+    service:
+      name: webhook-service
+      namespace: system
+      path: /validate-v1-namespace-freezed
+  failurePolicy: Fail
+  name: freezed.namespace.capsule.clastix.io
+  rules:
+  - apiGroups:
+    - ""
+    apiVersions:
+    - v1
+    operations:
+    - CREATE
+    - UPDATE
+    - DELETE
+    resources:
+    - namespaces
+  sideEffects: None
 - admissionReviewVersions:
   - v1
   clientConfig:
diff --git a/config/webhook/patch_ns_selector.yaml b/config/webhook/patch_ns_selector.yaml
index 36da24e5..fa1483c6 100644
--- a/config/webhook/patch_ns_selector.yaml
+++ b/config/webhook/patch_ns_selector.yaml
@@ -17,7 +17,7 @@
       - key: capsule.clastix.io/tenant
         operator: Exists
 - op: add
-  path: /webhooks/4/namespaceSelector
+  path: /webhooks/3/namespaceSelector
   value:
     matchExpressions:
       - key: capsule.clastix.io/tenant
@@ -49,3 +49,18 @@
 - op: add
   path: /webhooks/8/rules/0/scope
   value: Namespaced
+- op: add
+  path: /webhooks/9/namespaceSelector
+  value:
+    matchExpressions:
+      - key: capsule.clastix.io/tenant
+        operator: Exists
+- op: add
+  path: /webhooks/10/namespaceSelector
+  value:
+    matchExpressions:
+      - key: capsule.clastix.io/tenant
+        operator: Exists
+- op: add
+  path: /webhooks/10/rules/0/scope
+  value: Namespaced