lavenderguitar
3 years ago
3 changed files with 6192 additions and 0 deletions
@ -0,0 +1,32 @@ |
|||
--- |
|||
apiVersion: cert-manager.io/v1 |
|||
kind: ClusterIssuer |
|||
metadata: |
|||
name: certmanager-production-issuer |
|||
spec: |
|||
acme: |
|||
server: https://acme-v02.api.letsencrypt.org/directory |
|||
email: admin@jameslavender.com |
|||
privateKeySecretRef: |
|||
name: le-secret-prod |
|||
solvers: |
|||
- selectors: |
|||
http01: |
|||
ingress: |
|||
class: nginx |
|||
--- |
|||
apiVersion: cert-manager.io/v1 |
|||
kind: ClusterIssuer |
|||
metadata: |
|||
name: certmanager-staging-issuer |
|||
spec: |
|||
acme: |
|||
server: https://acme-staging-v02.api.letsencrypt.org/directory |
|||
email: admin@jameslavender.com |
|||
privateKeySecretRef: |
|||
name: le-secret-staging |
|||
solvers: |
|||
- selector: |
|||
http01: |
|||
ingress: |
|||
class: nginx |
|||
File diff suppressed because it is too large
@ -0,0 +1,697 @@ |
|||
--- |
|||
# Source: ingress-nginx/templates/controller-serviceaccount.yaml |
|||
apiVersion: v1 |
|||
kind: ServiceAccount |
|||
metadata: |
|||
labels: |
|||
helm.sh/chart: ingress-nginx-4.0.19 |
|||
app.kubernetes.io/name: ingress-nginx |
|||
app.kubernetes.io/instance: ingress-nginx |
|||
app.kubernetes.io/version: "1.1.3" |
|||
app.kubernetes.io/part-of: ingress-nginx |
|||
app.kubernetes.io/managed-by: Helm |
|||
app.kubernetes.io/component: controller |
|||
name: ingress-nginx |
|||
namespace: default |
|||
automountServiceAccountToken: true |
|||
--- |
|||
# Source: ingress-nginx/templates/controller-configmap.yaml |
|||
apiVersion: v1 |
|||
kind: ConfigMap |
|||
metadata: |
|||
labels: |
|||
helm.sh/chart: ingress-nginx-4.0.19 |
|||
app.kubernetes.io/name: ingress-nginx |
|||
app.kubernetes.io/instance: ingress-nginx |
|||
app.kubernetes.io/version: "1.1.3" |
|||
app.kubernetes.io/part-of: ingress-nginx |
|||
app.kubernetes.io/managed-by: Helm |
|||
app.kubernetes.io/component: controller |
|||
name: ingress-nginx-controller |
|||
namespace: default |
|||
data: |
|||
allow-snippet-annotations: "true" |
|||
--- |
|||
# Source: ingress-nginx/templates/clusterrole.yaml |
|||
apiVersion: rbac.authorization.k8s.io/v1 |
|||
kind: ClusterRole |
|||
metadata: |
|||
labels: |
|||
helm.sh/chart: ingress-nginx-4.0.19 |
|||
app.kubernetes.io/name: ingress-nginx |
|||
app.kubernetes.io/instance: ingress-nginx |
|||
app.kubernetes.io/version: "1.1.3" |
|||
app.kubernetes.io/part-of: ingress-nginx |
|||
app.kubernetes.io/managed-by: Helm |
|||
name: ingress-nginx |
|||
rules: |
|||
- apiGroups: |
|||
- "" |
|||
resources: |
|||
- configmaps |
|||
- endpoints |
|||
- nodes |
|||
- pods |
|||
- secrets |
|||
- namespaces |
|||
verbs: |
|||
- list |
|||
- watch |
|||
- apiGroups: |
|||
- "" |
|||
resources: |
|||
- nodes |
|||
verbs: |
|||
- get |
|||
- apiGroups: |
|||
- "" |
|||
resources: |
|||
- services |
|||
verbs: |
|||
- get |
|||
- list |
|||
- watch |
|||
- apiGroups: |
|||
- networking.k8s.io |
|||
resources: |
|||
- ingresses |
|||
verbs: |
|||
- get |
|||
- list |
|||
- watch |
|||
- apiGroups: |
|||
- "" |
|||
resources: |
|||
- events |
|||
verbs: |
|||
- create |
|||
- patch |
|||
- apiGroups: |
|||
- networking.k8s.io |
|||
resources: |
|||
- ingresses/status |
|||
verbs: |
|||
- update |
|||
- apiGroups: |
|||
- networking.k8s.io |
|||
resources: |
|||
- ingressclasses |
|||
verbs: |
|||
- get |
|||
- list |
|||
- watch |
|||
--- |
|||
# Source: ingress-nginx/templates/clusterrolebinding.yaml |
|||
apiVersion: rbac.authorization.k8s.io/v1 |
|||
kind: ClusterRoleBinding |
|||
metadata: |
|||
labels: |
|||
helm.sh/chart: ingress-nginx-4.0.19 |
|||
app.kubernetes.io/name: ingress-nginx |
|||
app.kubernetes.io/instance: ingress-nginx |
|||
app.kubernetes.io/version: "1.1.3" |
|||
app.kubernetes.io/part-of: ingress-nginx |
|||
app.kubernetes.io/managed-by: Helm |
|||
name: ingress-nginx |
|||
roleRef: |
|||
apiGroup: rbac.authorization.k8s.io |
|||
kind: ClusterRole |
|||
name: ingress-nginx |
|||
subjects: |
|||
- kind: ServiceAccount |
|||
name: ingress-nginx |
|||
namespace: "default" |
|||
--- |
|||
# Source: ingress-nginx/templates/controller-role.yaml |
|||
apiVersion: rbac.authorization.k8s.io/v1 |
|||
kind: Role |
|||
metadata: |
|||
labels: |
|||
helm.sh/chart: ingress-nginx-4.0.19 |
|||
app.kubernetes.io/name: ingress-nginx |
|||
app.kubernetes.io/instance: ingress-nginx |
|||
app.kubernetes.io/version: "1.1.3" |
|||
app.kubernetes.io/part-of: ingress-nginx |
|||
app.kubernetes.io/managed-by: Helm |
|||
app.kubernetes.io/component: controller |
|||
name: ingress-nginx |
|||
namespace: default |
|||
rules: |
|||
- apiGroups: |
|||
- "" |
|||
resources: |
|||
- namespaces |
|||
verbs: |
|||
- get |
|||
- apiGroups: |
|||
- "" |
|||
resources: |
|||
- configmaps |
|||
- pods |
|||
- secrets |
|||
- endpoints |
|||
verbs: |
|||
- get |
|||
- list |
|||
- watch |
|||
- apiGroups: |
|||
- "" |
|||
resources: |
|||
- services |
|||
verbs: |
|||
- get |
|||
- list |
|||
- watch |
|||
- apiGroups: |
|||
- networking.k8s.io |
|||
resources: |
|||
- ingresses |
|||
verbs: |
|||
- get |
|||
- list |
|||
- watch |
|||
- apiGroups: |
|||
- networking.k8s.io |
|||
resources: |
|||
- ingresses/status |
|||
verbs: |
|||
- update |
|||
- apiGroups: |
|||
- networking.k8s.io |
|||
resources: |
|||
- ingressclasses |
|||
verbs: |
|||
- get |
|||
- list |
|||
- watch |
|||
- apiGroups: |
|||
- "" |
|||
resources: |
|||
- configmaps |
|||
resourceNames: |
|||
- ingress-controller-leader |
|||
verbs: |
|||
- get |
|||
- update |
|||
- apiGroups: |
|||
- "" |
|||
resources: |
|||
- configmaps |
|||
verbs: |
|||
- create |
|||
- apiGroups: |
|||
- "" |
|||
resources: |
|||
- events |
|||
verbs: |
|||
- create |
|||
- patch |
|||
--- |
|||
# Source: ingress-nginx/templates/controller-rolebinding.yaml |
|||
apiVersion: rbac.authorization.k8s.io/v1 |
|||
kind: RoleBinding |
|||
metadata: |
|||
labels: |
|||
helm.sh/chart: ingress-nginx-4.0.19 |
|||
app.kubernetes.io/name: ingress-nginx |
|||
app.kubernetes.io/instance: ingress-nginx |
|||
app.kubernetes.io/version: "1.1.3" |
|||
app.kubernetes.io/part-of: ingress-nginx |
|||
app.kubernetes.io/managed-by: Helm |
|||
app.kubernetes.io/component: controller |
|||
name: ingress-nginx |
|||
namespace: default |
|||
roleRef: |
|||
apiGroup: rbac.authorization.k8s.io |
|||
kind: Role |
|||
name: ingress-nginx |
|||
subjects: |
|||
- kind: ServiceAccount |
|||
name: ingress-nginx |
|||
namespace: "default" |
|||
--- |
|||
# Source: ingress-nginx/templates/controller-service-webhook.yaml |
|||
apiVersion: v1 |
|||
kind: Service |
|||
metadata: |
|||
labels: |
|||
helm.sh/chart: ingress-nginx-4.0.19 |
|||
app.kubernetes.io/name: ingress-nginx |
|||
app.kubernetes.io/instance: ingress-nginx |
|||
app.kubernetes.io/version: "1.1.3" |
|||
app.kubernetes.io/part-of: ingress-nginx |
|||
app.kubernetes.io/managed-by: Helm |
|||
app.kubernetes.io/component: controller |
|||
name: ingress-nginx-controller-admission |
|||
namespace: default |
|||
spec: |
|||
type: ClusterIP |
|||
ports: |
|||
- name: https-webhook |
|||
port: 443 |
|||
targetPort: webhook |
|||
appProtocol: https |
|||
selector: |
|||
app.kubernetes.io/name: ingress-nginx |
|||
app.kubernetes.io/instance: ingress-nginx |
|||
app.kubernetes.io/component: controller |
|||
--- |
|||
# Source: ingress-nginx/templates/controller-service.yaml |
|||
apiVersion: v1 |
|||
kind: Service |
|||
metadata: |
|||
annotations: |
|||
labels: |
|||
helm.sh/chart: ingress-nginx-4.0.19 |
|||
app.kubernetes.io/name: ingress-nginx |
|||
app.kubernetes.io/instance: ingress-nginx |
|||
app.kubernetes.io/version: "1.1.3" |
|||
app.kubernetes.io/part-of: ingress-nginx |
|||
app.kubernetes.io/managed-by: Helm |
|||
app.kubernetes.io/component: controller |
|||
name: ingress-nginx-controller |
|||
namespace: default |
|||
spec: |
|||
type: LoadBalancer |
|||
ipFamilyPolicy: SingleStack |
|||
ipFamilies: |
|||
- IPv4 |
|||
ports: |
|||
- name: http |
|||
port: 80 |
|||
protocol: TCP |
|||
targetPort: http |
|||
appProtocol: http |
|||
- name: https |
|||
port: 443 |
|||
protocol: TCP |
|||
targetPort: https |
|||
appProtocol: https |
|||
selector: |
|||
app.kubernetes.io/name: ingress-nginx |
|||
app.kubernetes.io/instance: ingress-nginx |
|||
app.kubernetes.io/component: controller |
|||
--- |
|||
# Source: ingress-nginx/templates/controller-deployment.yaml |
|||
apiVersion: apps/v1 |
|||
kind: Deployment |
|||
metadata: |
|||
labels: |
|||
helm.sh/chart: ingress-nginx-4.0.19 |
|||
app.kubernetes.io/name: ingress-nginx |
|||
app.kubernetes.io/instance: ingress-nginx |
|||
app.kubernetes.io/version: "1.1.3" |
|||
app.kubernetes.io/part-of: ingress-nginx |
|||
app.kubernetes.io/managed-by: Helm |
|||
app.kubernetes.io/component: controller |
|||
name: ingress-nginx-controller |
|||
namespace: default |
|||
spec: |
|||
selector: |
|||
matchLabels: |
|||
app.kubernetes.io/name: ingress-nginx |
|||
app.kubernetes.io/instance: ingress-nginx |
|||
app.kubernetes.io/component: controller |
|||
replicas: 1 |
|||
revisionHistoryLimit: 10 |
|||
minReadySeconds: 0 |
|||
template: |
|||
metadata: |
|||
labels: |
|||
app.kubernetes.io/name: ingress-nginx |
|||
app.kubernetes.io/instance: ingress-nginx |
|||
app.kubernetes.io/component: controller |
|||
spec: |
|||
dnsPolicy: ClusterFirst |
|||
containers: |
|||
- name: controller |
|||
image: "k8s.gcr.io/ingress-nginx/controller:v1.1.3@sha256:31f47c1e202b39fadecf822a9b76370bd4baed199a005b3e7d4d1455f4fd3fe2" |
|||
imagePullPolicy: IfNotPresent |
|||
lifecycle: |
|||
preStop: |
|||
exec: |
|||
command: |
|||
- /wait-shutdown |
|||
args: |
|||
- /nginx-ingress-controller |
|||
- --publish-service=$(POD_NAMESPACE)/ingress-nginx-controller |
|||
- --election-id=ingress-controller-leader |
|||
- --controller-class=k8s.io/ingress-nginx |
|||
- --ingress-class=nginx |
|||
- --configmap=$(POD_NAMESPACE)/ingress-nginx-controller |
|||
- --validating-webhook=:8443 |
|||
- --validating-webhook-certificate=/usr/local/certificates/cert |
|||
- --validating-webhook-key=/usr/local/certificates/key |
|||
securityContext: |
|||
capabilities: |
|||
drop: |
|||
- ALL |
|||
add: |
|||
- NET_BIND_SERVICE |
|||
runAsUser: 101 |
|||
allowPrivilegeEscalation: true |
|||
env: |
|||
- name: POD_NAME |
|||
valueFrom: |
|||
fieldRef: |
|||
fieldPath: metadata.name |
|||
- name: POD_NAMESPACE |
|||
valueFrom: |
|||
fieldRef: |
|||
fieldPath: metadata.namespace |
|||
- name: LD_PRELOAD |
|||
value: /usr/local/lib/libmimalloc.so |
|||
livenessProbe: |
|||
failureThreshold: 5 |
|||
httpGet: |
|||
path: /healthz |
|||
port: 10254 |
|||
scheme: HTTP |
|||
initialDelaySeconds: 10 |
|||
periodSeconds: 10 |
|||
successThreshold: 1 |
|||
timeoutSeconds: 1 |
|||
readinessProbe: |
|||
failureThreshold: 3 |
|||
httpGet: |
|||
path: /healthz |
|||
port: 10254 |
|||
scheme: HTTP |
|||
initialDelaySeconds: 10 |
|||
periodSeconds: 10 |
|||
successThreshold: 1 |
|||
timeoutSeconds: 1 |
|||
ports: |
|||
- name: http |
|||
containerPort: 80 |
|||
protocol: TCP |
|||
- name: https |
|||
containerPort: 443 |
|||
protocol: TCP |
|||
- name: webhook |
|||
containerPort: 8443 |
|||
protocol: TCP |
|||
volumeMounts: |
|||
- name: webhook-cert |
|||
mountPath: /usr/local/certificates/ |
|||
readOnly: true |
|||
resources: |
|||
requests: |
|||
cpu: 100m |
|||
memory: 90Mi |
|||
nodeSelector: |
|||
kubernetes.io/os: linux |
|||
serviceAccountName: ingress-nginx |
|||
terminationGracePeriodSeconds: 300 |
|||
volumes: |
|||
- name: webhook-cert |
|||
secret: |
|||
secretName: ingress-nginx-admission |
|||
--- |
|||
# Source: ingress-nginx/templates/controller-ingressclass.yaml |
|||
# We don't support namespaced ingressClass yet |
|||
# So a ClusterRole and a ClusterRoleBinding is required |
|||
apiVersion: networking.k8s.io/v1 |
|||
kind: IngressClass |
|||
metadata: |
|||
labels: |
|||
helm.sh/chart: ingress-nginx-4.0.19 |
|||
app.kubernetes.io/name: ingress-nginx |
|||
app.kubernetes.io/instance: ingress-nginx |
|||
app.kubernetes.io/version: "1.1.3" |
|||
app.kubernetes.io/part-of: ingress-nginx |
|||
app.kubernetes.io/managed-by: Helm |
|||
app.kubernetes.io/component: controller |
|||
name: nginx |
|||
spec: |
|||
controller: k8s.io/ingress-nginx |
|||
--- |
|||
# Source: ingress-nginx/templates/admission-webhooks/validating-webhook.yaml |
|||
# before changing this value, check the required kubernetes version |
|||
# https://kubernetes.io/docs/reference/access-authn-authz/extensible-admission-controllers/#prerequisites |
|||
apiVersion: admissionregistration.k8s.io/v1 |
|||
kind: ValidatingWebhookConfiguration |
|||
metadata: |
|||
labels: |
|||
helm.sh/chart: ingress-nginx-4.0.19 |
|||
app.kubernetes.io/name: ingress-nginx |
|||
app.kubernetes.io/instance: ingress-nginx |
|||
app.kubernetes.io/version: "1.1.3" |
|||
app.kubernetes.io/part-of: ingress-nginx |
|||
app.kubernetes.io/managed-by: Helm |
|||
app.kubernetes.io/component: admission-webhook |
|||
name: ingress-nginx-admission |
|||
webhooks: |
|||
- name: validate.nginx.ingress.kubernetes.io |
|||
matchPolicy: Equivalent |
|||
rules: |
|||
- apiGroups: |
|||
- networking.k8s.io |
|||
apiVersions: |
|||
- v1 |
|||
operations: |
|||
- CREATE |
|||
- UPDATE |
|||
resources: |
|||
- ingresses |
|||
failurePolicy: Fail |
|||
sideEffects: None |
|||
admissionReviewVersions: |
|||
- v1 |
|||
clientConfig: |
|||
service: |
|||
namespace: "default" |
|||
name: ingress-nginx-controller-admission |
|||
path: /networking/v1/ingresses |
|||
--- |
|||
# Source: ingress-nginx/templates/admission-webhooks/job-patch/serviceaccount.yaml |
|||
apiVersion: v1 |
|||
kind: ServiceAccount |
|||
metadata: |
|||
name: ingress-nginx-admission |
|||
namespace: default |
|||
annotations: |
|||
"helm.sh/hook": pre-install,pre-upgrade,post-install,post-upgrade |
|||
"helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded |
|||
labels: |
|||
helm.sh/chart: ingress-nginx-4.0.19 |
|||
app.kubernetes.io/name: ingress-nginx |
|||
app.kubernetes.io/instance: ingress-nginx |
|||
app.kubernetes.io/version: "1.1.3" |
|||
app.kubernetes.io/part-of: ingress-nginx |
|||
app.kubernetes.io/managed-by: Helm |
|||
app.kubernetes.io/component: admission-webhook |
|||
--- |
|||
# Source: ingress-nginx/templates/admission-webhooks/job-patch/clusterrole.yaml |
|||
apiVersion: rbac.authorization.k8s.io/v1 |
|||
kind: ClusterRole |
|||
metadata: |
|||
name: ingress-nginx-admission |
|||
annotations: |
|||
"helm.sh/hook": pre-install,pre-upgrade,post-install,post-upgrade |
|||
"helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded |
|||
labels: |
|||
helm.sh/chart: ingress-nginx-4.0.19 |
|||
app.kubernetes.io/name: ingress-nginx |
|||
app.kubernetes.io/instance: ingress-nginx |
|||
app.kubernetes.io/version: "1.1.3" |
|||
app.kubernetes.io/part-of: ingress-nginx |
|||
app.kubernetes.io/managed-by: Helm |
|||
app.kubernetes.io/component: admission-webhook |
|||
rules: |
|||
- apiGroups: |
|||
- admissionregistration.k8s.io |
|||
resources: |
|||
- validatingwebhookconfigurations |
|||
verbs: |
|||
- get |
|||
- update |
|||
--- |
|||
# Source: ingress-nginx/templates/admission-webhooks/job-patch/clusterrolebinding.yaml |
|||
apiVersion: rbac.authorization.k8s.io/v1 |
|||
kind: ClusterRoleBinding |
|||
metadata: |
|||
name: ingress-nginx-admission |
|||
annotations: |
|||
"helm.sh/hook": pre-install,pre-upgrade,post-install,post-upgrade |
|||
"helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded |
|||
labels: |
|||
helm.sh/chart: ingress-nginx-4.0.19 |
|||
app.kubernetes.io/name: ingress-nginx |
|||
app.kubernetes.io/instance: ingress-nginx |
|||
app.kubernetes.io/version: "1.1.3" |
|||
app.kubernetes.io/part-of: ingress-nginx |
|||
app.kubernetes.io/managed-by: Helm |
|||
app.kubernetes.io/component: admission-webhook |
|||
roleRef: |
|||
apiGroup: rbac.authorization.k8s.io |
|||
kind: ClusterRole |
|||
name: ingress-nginx-admission |
|||
subjects: |
|||
- kind: ServiceAccount |
|||
name: ingress-nginx-admission |
|||
namespace: "default" |
|||
--- |
|||
# Source: ingress-nginx/templates/admission-webhooks/job-patch/role.yaml |
|||
apiVersion: rbac.authorization.k8s.io/v1 |
|||
kind: Role |
|||
metadata: |
|||
name: ingress-nginx-admission |
|||
namespace: default |
|||
annotations: |
|||
"helm.sh/hook": pre-install,pre-upgrade,post-install,post-upgrade |
|||
"helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded |
|||
labels: |
|||
helm.sh/chart: ingress-nginx-4.0.19 |
|||
app.kubernetes.io/name: ingress-nginx |
|||
app.kubernetes.io/instance: ingress-nginx |
|||
app.kubernetes.io/version: "1.1.3" |
|||
app.kubernetes.io/part-of: ingress-nginx |
|||
app.kubernetes.io/managed-by: Helm |
|||
app.kubernetes.io/component: admission-webhook |
|||
rules: |
|||
- apiGroups: |
|||
- "" |
|||
resources: |
|||
- secrets |
|||
verbs: |
|||
- get |
|||
- create |
|||
--- |
|||
# Source: ingress-nginx/templates/admission-webhooks/job-patch/rolebinding.yaml |
|||
apiVersion: rbac.authorization.k8s.io/v1 |
|||
kind: RoleBinding |
|||
metadata: |
|||
name: ingress-nginx-admission |
|||
namespace: default |
|||
annotations: |
|||
"helm.sh/hook": pre-install,pre-upgrade,post-install,post-upgrade |
|||
"helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded |
|||
labels: |
|||
helm.sh/chart: ingress-nginx-4.0.19 |
|||
app.kubernetes.io/name: ingress-nginx |
|||
app.kubernetes.io/instance: ingress-nginx |
|||
app.kubernetes.io/version: "1.1.3" |
|||
app.kubernetes.io/part-of: ingress-nginx |
|||
app.kubernetes.io/managed-by: Helm |
|||
app.kubernetes.io/component: admission-webhook |
|||
roleRef: |
|||
apiGroup: rbac.authorization.k8s.io |
|||
kind: Role |
|||
name: ingress-nginx-admission |
|||
subjects: |
|||
- kind: ServiceAccount |
|||
name: ingress-nginx-admission |
|||
namespace: "default" |
|||
--- |
|||
# Source: ingress-nginx/templates/admission-webhooks/job-patch/job-createSecret.yaml |
|||
apiVersion: batch/v1 |
|||
kind: Job |
|||
metadata: |
|||
name: ingress-nginx-admission-create |
|||
namespace: default |
|||
annotations: |
|||
"helm.sh/hook": pre-install,pre-upgrade |
|||
"helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded |
|||
labels: |
|||
helm.sh/chart: ingress-nginx-4.0.19 |
|||
app.kubernetes.io/name: ingress-nginx |
|||
app.kubernetes.io/instance: ingress-nginx |
|||
app.kubernetes.io/version: "1.1.3" |
|||
app.kubernetes.io/part-of: ingress-nginx |
|||
app.kubernetes.io/managed-by: Helm |
|||
app.kubernetes.io/component: admission-webhook |
|||
spec: |
|||
template: |
|||
metadata: |
|||
name: ingress-nginx-admission-create |
|||
labels: |
|||
helm.sh/chart: ingress-nginx-4.0.19 |
|||
app.kubernetes.io/name: ingress-nginx |
|||
app.kubernetes.io/instance: ingress-nginx |
|||
app.kubernetes.io/version: "1.1.3" |
|||
app.kubernetes.io/part-of: ingress-nginx |
|||
app.kubernetes.io/managed-by: Helm |
|||
app.kubernetes.io/component: admission-webhook |
|||
spec: |
|||
containers: |
|||
- name: create |
|||
image: "k8s.gcr.io/ingress-nginx/kube-webhook-certgen:v1.1.1@sha256:64d8c73dca984af206adf9d6d7e46aa550362b1d7a01f3a0a91b20cc67868660" |
|||
imagePullPolicy: IfNotPresent |
|||
args: |
|||
- create |
|||
- --host=ingress-nginx-controller-admission,ingress-nginx-controller-admission.$(POD_NAMESPACE).svc |
|||
- --namespace=$(POD_NAMESPACE) |
|||
- --secret-name=ingress-nginx-admission |
|||
env: |
|||
- name: POD_NAMESPACE |
|||
valueFrom: |
|||
fieldRef: |
|||
fieldPath: metadata.namespace |
|||
securityContext: |
|||
allowPrivilegeEscalation: false |
|||
restartPolicy: OnFailure |
|||
serviceAccountName: ingress-nginx-admission |
|||
nodeSelector: |
|||
kubernetes.io/os: linux |
|||
securityContext: |
|||
runAsNonRoot: true |
|||
runAsUser: 2000 |
|||
fsGroup: 2000 |
|||
--- |
|||
# Source: ingress-nginx/templates/admission-webhooks/job-patch/job-patchWebhook.yaml |
|||
apiVersion: batch/v1 |
|||
kind: Job |
|||
metadata: |
|||
name: ingress-nginx-admission-patch |
|||
namespace: default |
|||
annotations: |
|||
"helm.sh/hook": post-install,post-upgrade |
|||
"helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded |
|||
labels: |
|||
helm.sh/chart: ingress-nginx-4.0.19 |
|||
app.kubernetes.io/name: ingress-nginx |
|||
app.kubernetes.io/instance: ingress-nginx |
|||
app.kubernetes.io/version: "1.1.3" |
|||
app.kubernetes.io/part-of: ingress-nginx |
|||
app.kubernetes.io/managed-by: Helm |
|||
app.kubernetes.io/component: admission-webhook |
|||
spec: |
|||
template: |
|||
metadata: |
|||
name: ingress-nginx-admission-patch |
|||
labels: |
|||
helm.sh/chart: ingress-nginx-4.0.19 |
|||
app.kubernetes.io/name: ingress-nginx |
|||
app.kubernetes.io/instance: ingress-nginx |
|||
app.kubernetes.io/version: "1.1.3" |
|||
app.kubernetes.io/part-of: ingress-nginx |
|||
app.kubernetes.io/managed-by: Helm |
|||
app.kubernetes.io/component: admission-webhook |
|||
spec: |
|||
containers: |
|||
- name: patch |
|||
image: "k8s.gcr.io/ingress-nginx/kube-webhook-certgen:v1.1.1@sha256:64d8c73dca984af206adf9d6d7e46aa550362b1d7a01f3a0a91b20cc67868660" |
|||
imagePullPolicy: IfNotPresent |
|||
args: |
|||
- patch |
|||
- --webhook-name=ingress-nginx-admission |
|||
- --namespace=$(POD_NAMESPACE) |
|||
- --patch-mutating=false |
|||
- --secret-name=ingress-nginx-admission |
|||
- --patch-failure-policy=Fail |
|||
env: |
|||
- name: POD_NAMESPACE |
|||
valueFrom: |
|||
fieldRef: |
|||
fieldPath: metadata.namespace |
|||
securityContext: |
|||
allowPrivilegeEscalation: false |
|||
restartPolicy: OnFailure |
|||
serviceAccountName: ingress-nginx-admission |
|||
nodeSelector: |
|||
kubernetes.io/os: linux |
|||
securityContext: |
|||
runAsNonRoot: true |
|||
runAsUser: 2000 |
|||
fsGroup: 2000 |
|||
Loading…
Reference in new issue