Feature: Added MutatingWebhookConfiguration for mutating configMaps.

DoNnMyTh · Jun 14, 2019 · 5877127 · 5877127
1 parent b55446c
commit 5877127
Showing 1 changed file with 31 additions and 0 deletions.
diff --git a/vault-secrets-webhook/templates/apiservice-webhook.yaml b/vault-secrets-webhook/templates/apiservice-webhook.yaml
@@ -83,3 +83,34 @@ items:
         operator: NotIn
         values:
         - {{ .Release.Namespace }}
+  - name: configmaps.{{ template "vault-configmaps-webhook.name" . }}.admission.banzaicloud.com
+    clientConfig:
+      service:
+        namespace: {{ .Release.Namespace }}
+        name: {{ template "vault-configmaps-webhook.fullname" . }}
+        path: /configmaps
+      caBundle: {{ b64enc $ca.Cert }}
+    rules:
+      - operations:
+          - CREATE
+          - UPDATE
+        apiGroups:
+          - "*"
+        apiVersions:
+          - "*"
+        resources:
+          - configmaps
+    failurePolicy: Fail
+    namespaceSelector:
+    {{- if .Values.namespaceSelector.matchLabels }}
+      matchLabels:
+{{ toYaml .Values.namespaceSelector.matchLabels | indent 6 }}
+    {{- end }}
+      matchExpressions:
+    {{- if .Values.namespaceSelector.matchExpressions }}
+{{ toYaml .Values.namespaceSelector.matchExpressions | indent 6 }}
+    {{- end }}
+      - key: name
+        operator: NotIn
+        values:
+        - {{ .Release.Namespace }}