mirror of
https://github.com/projectcapsule/capsule.git
synced 2026-04-22 10:36:41 +00:00
14f9686bbb
* feat: forbidden node labels and annotations * test(e2e): forbidden node labels and annotations * build(kustomize): forbidden node labels and annotations * build(helm): forbidden node labels and annotations * build(installer): forbidden node labels and annotations * chore(make): forbidden node labels and annotations * docs: forbidden node labels and annotations * test(e2e): forbidden node labels and annotations. Use EventuallyCreation func * feat: forbidden node labels and annotations. Check kubernetes version * test(e2e): forbidden node labels and annotations. Check kubernetes version * docs: forbidden node labels and annotations. Version restrictions * feat: forbidden node labels and annotations. Do not update deepcopy functions * docs: forbidden node labels and annotations. Use blockquotes for notes Co-authored-by: Maksim Fedotov <m_fedotov@wargaming.net>
219 lines
3.9 KiB
YAML
219 lines
3.9 KiB
YAML
|
|
---
|
|
apiVersion: admissionregistration.k8s.io/v1
|
|
kind: MutatingWebhookConfiguration
|
|
metadata:
|
|
creationTimestamp: null
|
|
name: mutating-webhook-configuration
|
|
webhooks:
|
|
- admissionReviewVersions:
|
|
- v1
|
|
clientConfig:
|
|
service:
|
|
name: webhook-service
|
|
namespace: system
|
|
path: /namespace-owner-reference
|
|
failurePolicy: Fail
|
|
name: owner.namespace.capsule.clastix.io
|
|
rules:
|
|
- apiGroups:
|
|
- ""
|
|
apiVersions:
|
|
- v1
|
|
operations:
|
|
- CREATE
|
|
- UPDATE
|
|
resources:
|
|
- namespaces
|
|
sideEffects: None
|
|
|
|
---
|
|
apiVersion: admissionregistration.k8s.io/v1
|
|
kind: ValidatingWebhookConfiguration
|
|
metadata:
|
|
creationTimestamp: null
|
|
name: validating-webhook-configuration
|
|
webhooks:
|
|
- admissionReviewVersions:
|
|
- v1
|
|
clientConfig:
|
|
service:
|
|
name: webhook-service
|
|
namespace: system
|
|
path: /cordoning
|
|
failurePolicy: Fail
|
|
name: cordoning.tenant.capsule.clastix.io
|
|
rules:
|
|
- apiGroups:
|
|
- '*'
|
|
apiVersions:
|
|
- '*'
|
|
operations:
|
|
- CREATE
|
|
- UPDATE
|
|
- DELETE
|
|
resources:
|
|
- '*'
|
|
sideEffects: None
|
|
- admissionReviewVersions:
|
|
- v1
|
|
clientConfig:
|
|
service:
|
|
name: webhook-service
|
|
namespace: system
|
|
path: /ingresses
|
|
failurePolicy: Fail
|
|
name: ingress.capsule.clastix.io
|
|
rules:
|
|
- apiGroups:
|
|
- networking.k8s.io
|
|
- extensions
|
|
apiVersions:
|
|
- v1beta1
|
|
- v1
|
|
operations:
|
|
- CREATE
|
|
- UPDATE
|
|
resources:
|
|
- ingresses
|
|
sideEffects: None
|
|
- admissionReviewVersions:
|
|
- v1
|
|
clientConfig:
|
|
service:
|
|
name: webhook-service
|
|
namespace: system
|
|
path: /namespaces
|
|
failurePolicy: Fail
|
|
name: namespaces.capsule.clastix.io
|
|
rules:
|
|
- apiGroups:
|
|
- ""
|
|
apiVersions:
|
|
- v1
|
|
operations:
|
|
- CREATE
|
|
- UPDATE
|
|
- DELETE
|
|
resources:
|
|
- namespaces
|
|
sideEffects: None
|
|
- admissionReviewVersions:
|
|
- v1
|
|
clientConfig:
|
|
service:
|
|
name: webhook-service
|
|
namespace: system
|
|
path: /networkpolicies
|
|
failurePolicy: Fail
|
|
name: networkpolicies.capsule.clastix.io
|
|
rules:
|
|
- apiGroups:
|
|
- networking.k8s.io
|
|
apiVersions:
|
|
- v1
|
|
operations:
|
|
- UPDATE
|
|
- DELETE
|
|
resources:
|
|
- networkpolicies
|
|
sideEffects: None
|
|
- admissionReviewVersions:
|
|
- v1
|
|
clientConfig:
|
|
service:
|
|
name: webhook-service
|
|
namespace: system
|
|
path: /nodes
|
|
failurePolicy: Fail
|
|
name: nodes.capsule.clastix.io
|
|
rules:
|
|
- apiGroups:
|
|
- ""
|
|
apiVersions:
|
|
- v1
|
|
operations:
|
|
- UPDATE
|
|
resources:
|
|
- nodes
|
|
sideEffects: None
|
|
- admissionReviewVersions:
|
|
- v1
|
|
clientConfig:
|
|
service:
|
|
name: webhook-service
|
|
namespace: system
|
|
path: /pods
|
|
failurePolicy: Fail
|
|
name: pods.capsule.clastix.io
|
|
rules:
|
|
- apiGroups:
|
|
- ""
|
|
apiVersions:
|
|
- v1
|
|
operations:
|
|
- CREATE
|
|
resources:
|
|
- pods
|
|
sideEffects: None
|
|
- admissionReviewVersions:
|
|
- v1
|
|
clientConfig:
|
|
service:
|
|
name: webhook-service
|
|
namespace: system
|
|
path: /persistentvolumeclaims
|
|
failurePolicy: Fail
|
|
name: pvc.capsule.clastix.io
|
|
rules:
|
|
- apiGroups:
|
|
- ""
|
|
apiVersions:
|
|
- v1
|
|
operations:
|
|
- CREATE
|
|
resources:
|
|
- persistentvolumeclaims
|
|
sideEffects: None
|
|
- admissionReviewVersions:
|
|
- v1
|
|
clientConfig:
|
|
service:
|
|
name: webhook-service
|
|
namespace: system
|
|
path: /services
|
|
failurePolicy: Fail
|
|
name: services.capsule.clastix.io
|
|
rules:
|
|
- apiGroups:
|
|
- ""
|
|
apiVersions:
|
|
- v1
|
|
operations:
|
|
- CREATE
|
|
- UPDATE
|
|
resources:
|
|
- services
|
|
sideEffects: None
|
|
- admissionReviewVersions:
|
|
- v1
|
|
clientConfig:
|
|
service:
|
|
name: webhook-service
|
|
namespace: system
|
|
path: /tenants
|
|
failurePolicy: Fail
|
|
name: tenants.capsule.clastix.io
|
|
rules:
|
|
- apiGroups:
|
|
- capsule.clastix.io
|
|
apiVersions:
|
|
- v1beta1
|
|
operations:
|
|
- CREATE
|
|
- UPDATE
|
|
- DELETE
|
|
resources:
|
|
- tenants
|
|
sideEffects: None
|