grumpy/manifest.yaml at master · benfrew13/grumpy · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
---
apiVersion: v1
kind: Service
metadata:
  name: grumpy
  namespace: default
  labels:
    name: grumpy
spec:
  ports:
  - name: webhook
    port: 443
    targetPort: 8080
  selector:
    name: grumpy
---
apiVersion: apps/v1beta1
kind: Deployment
metadata:
  name: grumpy
  namespace: default
  labels:
    name: grumpy
spec:
  replicas: 1
  template:
    metadata:
      name: grumpy
      labels:
        name: grumpy
    spec:
      containers:
        - name: webhook
          image: quay.io/giantswarm/grumpy:1.0.0
          imagePullPolicy: Always
          args:
            - -alsologtostderr
            - --log_dir=/
            - -v=10
            - 2>&1
          resources:
            limits:
              memory: 50Mi
              cpu: 300m
            requests:
              memory: 00Mi
              cpu: 300m
          volumeMounts:
            - name: webhook-certs
              mountPath: /etc/certs
              readOnly: true
            - name: logs
              mountPath: /tmp
          securityContext:
            readOnlyRootFilesystem: true
      volumes:
        - name: webhook-certs
          secret:
            secretName: grumpy
        - name: logs
          emptyDir: {}
---
apiVersion: admissionregistration.k8s.io/v1beta1
kind: ValidatingWebhookConfiguration
metadata:
  name: grumpy
webhooks:
  - name: grumpy-webhook
    clientConfig:
      service:
        name: grumpy
        namespace: default
        path: "/validate"
      caBundle: "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"
    rules:
      - operations: ["CREATE","UPDATE"]
        apiGroups: [""]
        apiVersions: ["v1"]
        resources: ["pods"]
    failurePolicy: Ignore