add

build/yamls/kubernetes/all-in-one.yaml

@@ -48,7 +48,7 @@ stringData:
   # MaxMind GeoIP2 precision API keys
   maxmind-account-id: ""
   maxmind-license-key: ""
-#---
+---
 # Provide the Private and Public SSH keys of the control plane node to enable node contribution feature.
 apiVersion: v1
 kind: Secret

test.yaml

@@ -0,0 +1,110 @@
+kind: ValidatingWebhookConfiguration
+apiVersion: admissionregistration.k8s.io/v1
+metadata:
+  name: edgenet-admission-control
+  annotations:
+    cert-manager.io/inject-ca-from: edgenet/api-server-webhook
+webhooks:
+- name: pod-bandwidth-validate.edge-net.io
+  clientConfig:
+    service:
+      namespace: edgenet
+      name: admission-control
+      path: /validate/pod
+  namespaceSelector:
+    matchExpressions:
+    - key: kubernetes.io/metadata.name
+      operator: NotIn
+      values: ["edgenet", "kube-system", "cert-manager"]
+  rules:
+  - apiGroups: [""]
+    apiVersions: ["v1"]
+    resources: ["pods"]
+    operations: ["CREATE", "UPDATE"]
+    scope: Namespaced
+  sideEffects: None
+  admissionReviewVersions: ["v1"]
+- name: tenant-request-validate.edge-net.io
+  clientConfig:
+    service:
+      namespace: edgenet
+      name: admission-control
+      path: /validate/tenant-request
+  rules:
+  - apiGroups: ["registration.edgenet.io"]
+    apiVersions: ["v1alpha1"]
+    resources: ["tenantrequests"]
+    operations: ["CREATE"]
+    scope: Cluster
+  sideEffects: None
+  admissionReviewVersions: ["v1"]
+- name: cluster-role-request-validate.edge-net.io
+  clientConfig:
+    service:
+      namespace: edgenet
+      name: admission-control
+      path: /validate/cluster-role-request
+  rules:
+  - apiGroups: ["registration.edgenet.io"]
+    apiVersions: ["v1alpha1"]
+    resources: ["clusterrolerequests"]
+    operations: ["CREATE"]
+    scope: Cluster
+  sideEffects: None
+  admissionReviewVersions: ["v1"]
+- name: role-request-validate.edge-net.io
+  clientConfig:
+    service:
+      namespace: edgenet
+      name: admission-control
+      path: /validate/role-request
+  rules:
+  - apiGroups: ["registration.edgenet.io"]
+    apiVersions: ["v1alpha1"]
+    resources: ["rolerequests"]
+    operations: ["CREATE"]
+    scope: Namespaced
+  sideEffects: None
+  admissionReviewVersions: ["v1"]
+- name: subnamespace-validate.edge-net.io
+  clientConfig:
+    service:
+      namespace: edgenet
+      name: admission-control
+      path: /validate/subnamespace
+  rules:
+  - apiGroups: ["core.edgenet.io"]
+    apiVersions: ["v1alpha1"]
+    resources: ["subnamespaces"]
+    operations: ["CREATE", "UPDATE"]
+    scope: Namespaced
+  sideEffects: None
+  admissionReviewVersions: ["v1"]
+- name: slice-validate.edge-net.io
+  clientConfig:
+    service:
+      namespace: edgenet
+      name: admission-control
+      path: /validate/slice
+  rules:
+  - apiGroups: ["core.edgenet.io"]
+    apiVersions: ["v1alpha1"]
+    resources: ["slices"]
+    operations: ["UPDATE"]
+    scope: Cluster
+  sideEffects: None
+  admissionReviewVersions: ["v1"]
+- name: slice-claim-validate.edge-net.io
+  clientConfig:
+    service:
+      namespace: edgenet
+      name: admission-control
+      path: /validate/slice-claim
+  rules:
+  - apiGroups: ["core.edgenet.io"]
+    apiVersions: ["v1alpha1"]
+    resources: ["sliceclaims"]
+    operations: ["UPDATE"]
+    scope: Namespaced
+  sideEffects: None
+  admissionReviewVersions: ["v1"]