Add samples for webhook configuration.

Author: yxd-ym

examples/operator/templates/mutating-webhook-configuration.yaml

@@ -0,0 +1,29 @@
+apiVersion: admissionregistration.k8s.io/v1
+kind: MutatingWebhookConfiguration
+metadata:
+  name: {{ include "operator.fullname" . }}-mutating-webhook-configuration
+  annotations:
+    cert-manager.io/inject-ca-from: {{ .Release.Namespace }}/{{ include "operator.fullname" . }}-serving-cert
+  labels:
+  {{- include "operator.labels" . | nindent 4 }}
+webhooks:
+- admissionReviewVersions:
+  - v1
+  clientConfig:
+    service:
+      name: '{{ include "operator.fullname" . }}-webhook-service'
+      namespace: '{{ .Release.Namespace }}'
+      path: /mutate-ceph-example-com-v1-mycluster
+  failurePolicy: Fail
+  name: mmycluster.kb.io
+  rules:
+  - apiGroups:
+    - test.example.com
+    apiVersions:
+    - v1
+    operations:
+    - CREATE
+    - UPDATE
+    resources:
+    - myclusters
+  sideEffects: None

examples/operator/templates/validating-webhook-configuration.yaml

@@ -3,7 +3,7 @@ kind: ValidatingWebhookConfiguration
 metadata:
   name: {{ include "operator.fullname" . }}-validating-webhook-configuration
   annotations:
-    cert-manager.io/inject-ca-from: {{ .Release.Namespace }}/{{ include "operator.fullname" . }}-my-operator-system/my-operator-serving-cert
+    cert-manager.io/inject-ca-from: {{ .Release.Namespace }}/{{ include "operator.fullname" . }}-serving-cert
   labels:
   {{- include "operator.labels" . | nindent 4 }}
 webhooks:

test_data/k8s-operator-kustomize.output

@@ -662,7 +662,7 @@ apiVersion: admissionregistration.k8s.io/v1
 kind: ValidatingWebhookConfiguration
 metadata:
   annotations:
-    cert-manager.io/inject-ca-from: my-operator-system/my-operator-serving-cert
+    cert-manager.io/inject-ca-from: my-operator-system/operator-serving-cert
   name: my-operator-validating-webhook-configuration
 webhooks:
 - admissionReviewVersions:
@@ -724,3 +724,31 @@ spec:
     requests:
       storage: 2Gi
   storageClassName: cust1-mypool-lim
+---
+apiVersion: admissionregistration.k8s.io/v1
+kind: MutatingWebhookConfiguration
+metadata:
+  annotations:
+    cert-manager.io/inject-ca-from: my-operator-system/operator-serving-cert
+  name: my-operator-mutating-webhook-configuration
+webhooks:
+- admissionReviewVersions:
+  - v1
+  clientConfig:
+    service:
+      name: my-operator-webhook-service
+      namespace: my-operator-system
+      path: /mutate-ceph-example-com-v1-mycluster
+  failurePolicy: Fail
+  name: mmycluster.kb.io
+  rules:
+  - apiGroups:
+    - test.example.com
+    apiVersions:
+    - v1
+    operations:
+    - CREATE
+    - UPDATE
+    resources:
+    - myclusters
+  sideEffects: None