mirror of
https://github.com/jenkinsci/kubernetes-operator.git
synced 2026-09-29 20:51:10 +02:00
Added validation webhook,cert-manager,and updated Makefile.
- Scaffolded a new validation webhook using operator-sdk - Added manifests for webhook. - Added manifests for self signed issuer and certificates - Added a new spec named ValidateSecurityWarnings to the Jenkins custom resource definition to enable/disable security check. - Updated Makefile to deploy the operator locally. - Updated helm template and default values.yaml
This commit is contained in:
committed by
Sylwia Brant
parent
126b02aaab
commit
626246ac4d
@@ -35,6 +35,10 @@ spec:
|
||||
spec:
|
||||
description: Spec defines the desired state of the Jenkins
|
||||
properties:
|
||||
ValidateSecurityWarnings:
|
||||
description: ValidateSecurityWarnings enables or disables validating
|
||||
potential security warnings in Jenkins plugins via admission webhooks.
|
||||
type: boolean
|
||||
backup:
|
||||
description: 'Backup defines configuration of Jenkins backup More
|
||||
info: https://jenkinsci.github.io/kubernetes-operator/docs/getting-started/latest/configure-backup-and-restore/'
|
||||
|
||||
@@ -0,0 +1,29 @@
|
||||
|
||||
---
|
||||
apiVersion: admissionregistration.k8s.io/v1
|
||||
kind: ValidatingWebhookConfiguration
|
||||
metadata:
|
||||
creationTimestamp: null
|
||||
name: validating-webhook-configuration
|
||||
webhooks:
|
||||
- admissionReviewVersions:
|
||||
- v1
|
||||
- v1beta1
|
||||
clientConfig:
|
||||
service:
|
||||
name: webhook-service
|
||||
namespace: system
|
||||
path: /validate-jenkins-io-jenkins-io-v1alpha2-jenkins
|
||||
failurePolicy: Fail
|
||||
name: vjenkins.kb.io
|
||||
rules:
|
||||
- apiGroups:
|
||||
- jenkins.io.jenkins.io
|
||||
apiVersions:
|
||||
- v1alpha2
|
||||
operations:
|
||||
- CREATE
|
||||
- UPDATE
|
||||
resources:
|
||||
- jenkins
|
||||
sideEffects: None
|
||||
@@ -0,0 +1,12 @@
|
||||
|
||||
apiVersion: v1
|
||||
kind: Service
|
||||
metadata:
|
||||
name: webhook-service
|
||||
namespace: system
|
||||
spec:
|
||||
ports:
|
||||
- port: 443
|
||||
targetPort: 9443
|
||||
selector:
|
||||
control-plane: controller-manager
|
||||
Reference in New Issue
Block a user