simon/cert-manager-webhook-manitu
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Merge pull request #12 from rikatz/deprecated-apis

Browse Source 
Update helm template for deprecated APIs
This commit is contained in:
jetstack-bot 2020-07-15 20:02:34 +01:00 committed by GitHub
commit 46d50dbbf9
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
4 changed files with 10 additions and 10 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
deploy/example-webhook/templates/apiservice.yaml
View File

@ -1,4 +1,4 @@
apiVersion: apiregistration.k8s.io/v1beta1 apiVersion: apiregistration.k8s.io/v1
kind: APIService kind: APIService
metadata: metadata:
name: v1alpha1.{{ .Values.groupName }} name: v1alpha1.{{ .Values.groupName }}

2
deploy/example-webhook/templates/deployment.yaml
View File

@ -1,4 +1,4 @@
apiVersion: apps/v1beta2 apiVersion: apps/v1
kind: Deployment kind: Deployment
metadata: metadata:
name: {{ include "example-webhook.fullname" . }} name: {{ include "example-webhook.fullname" . }}

8
deploy/example-webhook/templates/pki.yaml
View File

@ -1,7 +1,7 @@
--- ---
# Create a selfsigned Issuer, in order to create a root CA certificate for # Create a selfsigned Issuer, in order to create a root CA certificate for
# signing webhook serving certificates # signing webhook serving certificates
apiVersion: certmanager.k8s.io/v1alpha1 apiVersion: cert-manager.io/v1alpha3
kind: Issuer kind: Issuer
metadata: metadata:
name: {{ include "example-webhook.selfSignedIssuer" . }} name: {{ include "example-webhook.selfSignedIssuer" . }}
@ -17,7 +17,7 @@ spec:
--- ---
# Generate a CA Certificate used to sign certificates for the webhook # Generate a CA Certificate used to sign certificates for the webhook
apiVersion: certmanager.k8s.io/v1alpha1 apiVersion: cert-manager.io/v1alpha3
kind: Certificate kind: Certificate
metadata: metadata:
name: {{ include "example-webhook.rootCACertificate" . }} name: {{ include "example-webhook.rootCACertificate" . }}
@ -38,7 +38,7 @@ spec:
--- ---
# Create an Issuer that uses the above generated CA certificate to issue certs # Create an Issuer that uses the above generated CA certificate to issue certs
apiVersion: certmanager.k8s.io/v1alpha1 apiVersion: cert-manager.io/v1alpha3
kind: Issuer kind: Issuer
metadata: metadata:
name: {{ include "example-webhook.rootCAIssuer" . }} name: {{ include "example-webhook.rootCAIssuer" . }}
@ -55,7 +55,7 @@ spec:
--- ---
# Finally, generate a serving certificate for the webhook to use # Finally, generate a serving certificate for the webhook to use
apiVersion: certmanager.k8s.io/v1alpha1 apiVersion: cert-manager.io/v1alpha3
kind: Certificate kind: Certificate
metadata: metadata:
name: {{ include "example-webhook.servingCertificate" . }} name: {{ include "example-webhook.servingCertificate" . }}

8
deploy/example-webhook/templates/rbac.yaml
View File

@ -11,7 +11,7 @@ metadata:
# Grant the webhook permission to read the ConfigMap containing the Kubernetes # Grant the webhook permission to read the ConfigMap containing the Kubernetes
# apiserver's requestheader-ca-certificate. # apiserver's requestheader-ca-certificate.
# This ConfigMap is automatically created by the Kubernetes apiserver. # This ConfigMap is automatically created by the Kubernetes apiserver.
apiVersion: rbac.authorization.k8s.io/v1beta1 apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding kind: RoleBinding
metadata: metadata:
name: {{ include "example-webhook.fullname" . }}:webhook-authentication-reader name: {{ include "example-webhook.fullname" . }}:webhook-authentication-reader
@ -33,7 +33,7 @@ subjects:
--- ---
# apiserver gets the auth-delegator role to delegate auth decisions to # apiserver gets the auth-delegator role to delegate auth decisions to
# the core apiserver # the core apiserver
apiVersion: rbac.authorization.k8s.io/v1beta1 apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding kind: ClusterRoleBinding
metadata: metadata:
name: {{ include "example-webhook.fullname" . }}:auth-delegator name: {{ include "example-webhook.fullname" . }}:auth-delegator
@ -53,7 +53,7 @@ subjects:
namespace: {{ .Release.Namespace }} namespace: {{ .Release.Namespace }}
--- ---
# Grant cert-manager permission to validate using our apiserver # Grant cert-manager permission to validate using our apiserver
apiVersion: rbac.authorization.k8s.io/v1beta1 apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole kind: ClusterRole
metadata: metadata:
name: {{ include "example-webhook.fullname" . }}:domain-solver name: {{ include "example-webhook.fullname" . }}:domain-solver
@ -70,7 +70,7 @@ rules:
verbs: verbs:
- 'create' - 'create'
--- ---
apiVersion: rbac.authorization.k8s.io/v1beta1 apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding kind: ClusterRoleBinding
metadata: metadata:
name: {{ include "example-webhook.fullname" . }}:domain-solver name: {{ include "example-webhook.fullname" . }}:domain-solver