Last active
January 15, 2025 08:37
-
-
Save blankdots/ce8c30728c741d51fcd44d10f5498e35 to your computer and use it in GitHub Desktop.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
--- | |
apiVersion: v1 | |
kind: Namespace | |
metadata: | |
name: ingress-nginx | |
labels: | |
name: ingress-nginx | |
--- | |
# Source: ingress-nginx/templates/controller-serviceaccount.yaml | |
apiVersion: v1 | |
kind: ServiceAccount | |
metadata: | |
labels: | |
helm.sh/chart: ingress-nginx-4.12.0 | |
app.kubernetes.io/name: ingress-nginx | |
app.kubernetes.io/instance: ingress-nginx | |
app.kubernetes.io/version: "1.12.0" | |
app.kubernetes.io/part-of: ingress-nginx | |
app.kubernetes.io/managed-by: Helm | |
app.kubernetes.io/component: controller | |
name: ingress-nginx | |
namespace: ingress-nginx | |
automountServiceAccountToken: true | |
--- | |
# Source: ingress-nginx/templates/controller-configmap.yaml | |
apiVersion: v1 | |
kind: ConfigMap | |
metadata: | |
labels: | |
helm.sh/chart: ingress-nginx-4.12.0 | |
app.kubernetes.io/name: ingress-nginx | |
app.kubernetes.io/instance: ingress-nginx | |
app.kubernetes.io/version: "1.12.0" | |
app.kubernetes.io/part-of: ingress-nginx | |
app.kubernetes.io/managed-by: Helm | |
app.kubernetes.io/component: controller | |
name: ingress-nginx-controller | |
namespace: ingress-nginx | |
data: | |
--- | |
# Source: ingress-nginx/templates/clusterrole.yaml | |
apiVersion: rbac.authorization.k8s.io/v1 | |
kind: ClusterRole | |
metadata: | |
labels: | |
helm.sh/chart: ingress-nginx-4.12.0 | |
app.kubernetes.io/name: ingress-nginx | |
app.kubernetes.io/instance: ingress-nginx | |
app.kubernetes.io/version: "1.12.0" | |
app.kubernetes.io/part-of: ingress-nginx | |
app.kubernetes.io/managed-by: Helm | |
name: ingress-nginx | |
rules: | |
- apiGroups: | |
- "" | |
resources: | |
- configmaps | |
- endpoints | |
- nodes | |
- pods | |
- secrets | |
- namespaces | |
verbs: | |
- list | |
- watch | |
- apiGroups: | |
- coordination.k8s.io | |
resources: | |
- leases | |
verbs: | |
- list | |
- watch | |
- apiGroups: | |
- "" | |
resources: | |
- nodes | |
verbs: | |
- get | |
- apiGroups: | |
- "" | |
resources: | |
- services | |
verbs: | |
- get | |
- list | |
- watch | |
- apiGroups: | |
- networking.k8s.io | |
resources: | |
- ingresses | |
verbs: | |
- get | |
- list | |
- watch | |
- apiGroups: | |
- "" | |
resources: | |
- events | |
verbs: | |
- create | |
- patch | |
- apiGroups: | |
- networking.k8s.io | |
resources: | |
- ingresses/status | |
verbs: | |
- update | |
- apiGroups: | |
- networking.k8s.io | |
resources: | |
- ingressclasses | |
verbs: | |
- get | |
- list | |
- watch | |
- apiGroups: | |
- discovery.k8s.io | |
resources: | |
- endpointslices | |
verbs: | |
- list | |
- watch | |
- get | |
--- | |
# Source: ingress-nginx/templates/clusterrolebinding.yaml | |
apiVersion: rbac.authorization.k8s.io/v1 | |
kind: ClusterRoleBinding | |
metadata: | |
labels: | |
helm.sh/chart: ingress-nginx-4.12.0 | |
app.kubernetes.io/name: ingress-nginx | |
app.kubernetes.io/instance: ingress-nginx | |
app.kubernetes.io/version: "1.12.0" | |
app.kubernetes.io/part-of: ingress-nginx | |
app.kubernetes.io/managed-by: Helm | |
name: ingress-nginx | |
roleRef: | |
apiGroup: rbac.authorization.k8s.io | |
kind: ClusterRole | |
name: ingress-nginx | |
subjects: | |
- kind: ServiceAccount | |
name: ingress-nginx | |
namespace: ingress-nginx | |
--- | |
# Source: ingress-nginx/templates/controller-role.yaml | |
apiVersion: rbac.authorization.k8s.io/v1 | |
kind: Role | |
metadata: | |
labels: | |
helm.sh/chart: ingress-nginx-4.12.0 | |
app.kubernetes.io/name: ingress-nginx | |
app.kubernetes.io/instance: ingress-nginx | |
app.kubernetes.io/version: "1.12.0" | |
app.kubernetes.io/part-of: ingress-nginx | |
app.kubernetes.io/managed-by: Helm | |
app.kubernetes.io/component: controller | |
name: ingress-nginx | |
namespace: ingress-nginx | |
rules: | |
- apiGroups: | |
- "" | |
resources: | |
- namespaces | |
verbs: | |
- get | |
- apiGroups: | |
- "" | |
resources: | |
- configmaps | |
- pods | |
- secrets | |
- endpoints | |
verbs: | |
- get | |
- list | |
- watch | |
- apiGroups: | |
- "" | |
resources: | |
- services | |
verbs: | |
- get | |
- list | |
- watch | |
- apiGroups: | |
- networking.k8s.io | |
resources: | |
- ingresses | |
verbs: | |
- get | |
- list | |
- watch | |
# Omit Ingress status permissions if `--update-status` is disabled. | |
- apiGroups: | |
- networking.k8s.io | |
resources: | |
- ingresses/status | |
verbs: | |
- update | |
- apiGroups: | |
- networking.k8s.io | |
resources: | |
- ingressclasses | |
verbs: | |
- get | |
- list | |
- watch | |
- apiGroups: | |
- coordination.k8s.io | |
resources: | |
- leases | |
resourceNames: | |
- ingress-nginx-leader | |
verbs: | |
- get | |
- update | |
- apiGroups: | |
- coordination.k8s.io | |
resources: | |
- leases | |
verbs: | |
- create | |
- apiGroups: | |
- "" | |
resources: | |
- events | |
verbs: | |
- create | |
- patch | |
- apiGroups: | |
- discovery.k8s.io | |
resources: | |
- endpointslices | |
verbs: | |
- list | |
- watch | |
- get | |
--- | |
# Source: ingress-nginx/templates/controller-rolebinding.yaml | |
apiVersion: rbac.authorization.k8s.io/v1 | |
kind: RoleBinding | |
metadata: | |
labels: | |
helm.sh/chart: ingress-nginx-4.12.0 | |
app.kubernetes.io/name: ingress-nginx | |
app.kubernetes.io/instance: ingress-nginx | |
app.kubernetes.io/version: "1.12.0" | |
app.kubernetes.io/part-of: ingress-nginx | |
app.kubernetes.io/managed-by: Helm | |
app.kubernetes.io/component: controller | |
name: ingress-nginx | |
namespace: ingress-nginx | |
roleRef: | |
apiGroup: rbac.authorization.k8s.io | |
kind: Role | |
name: ingress-nginx | |
subjects: | |
- kind: ServiceAccount | |
name: ingress-nginx | |
namespace: ingress-nginx | |
--- | |
# Source: ingress-nginx/templates/controller-service-webhook.yaml | |
apiVersion: v1 | |
kind: Service | |
metadata: | |
labels: | |
helm.sh/chart: ingress-nginx-4.12.0 | |
app.kubernetes.io/name: ingress-nginx | |
app.kubernetes.io/instance: ingress-nginx | |
app.kubernetes.io/version: "1.12.0" | |
app.kubernetes.io/part-of: ingress-nginx | |
app.kubernetes.io/managed-by: Helm | |
app.kubernetes.io/component: controller | |
name: ingress-nginx-controller-admission | |
namespace: ingress-nginx | |
spec: | |
type: ClusterIP | |
ports: | |
- name: https-webhook | |
port: 443 | |
targetPort: webhook | |
appProtocol: https | |
selector: | |
app.kubernetes.io/name: ingress-nginx | |
app.kubernetes.io/instance: ingress-nginx | |
app.kubernetes.io/component: controller | |
--- | |
# Source: ingress-nginx/templates/controller-service.yaml | |
apiVersion: v1 | |
kind: Service | |
metadata: | |
annotations: | |
labels: | |
helm.sh/chart: ingress-nginx-4.12.0 | |
app.kubernetes.io/name: ingress-nginx | |
app.kubernetes.io/instance: ingress-nginx | |
app.kubernetes.io/version: "1.12.0" | |
app.kubernetes.io/part-of: ingress-nginx | |
app.kubernetes.io/managed-by: Helm | |
app.kubernetes.io/component: controller | |
name: ingress-nginx-controller | |
namespace: ingress-nginx | |
spec: | |
type: NodePort | |
ipFamilyPolicy: SingleStack | |
ipFamilies: | |
- IPv4 | |
ports: | |
- name: http | |
port: 80 | |
protocol: TCP | |
targetPort: http | |
appProtocol: http | |
nodePort: 30001 | |
- name: https | |
port: 443 | |
protocol: TCP | |
targetPort: https | |
appProtocol: https | |
nodePort: 30002 | |
selector: | |
app.kubernetes.io/name: ingress-nginx | |
app.kubernetes.io/instance: ingress-nginx | |
app.kubernetes.io/component: controller | |
--- | |
# Source: ingress-nginx/templates/controller-deployment.yaml | |
apiVersion: apps/v1 | |
kind: Deployment | |
metadata: | |
labels: | |
helm.sh/chart: ingress-nginx-4.12.0 | |
app.kubernetes.io/name: ingress-nginx | |
app.kubernetes.io/instance: ingress-nginx | |
app.kubernetes.io/version: "1.12.0" | |
app.kubernetes.io/part-of: ingress-nginx | |
app.kubernetes.io/managed-by: Helm | |
app.kubernetes.io/component: controller | |
name: ingress-nginx-controller | |
namespace: ingress-nginx | |
spec: | |
selector: | |
matchLabels: | |
app.kubernetes.io/name: ingress-nginx | |
app.kubernetes.io/instance: ingress-nginx | |
app.kubernetes.io/component: controller | |
replicas: 1 | |
revisionHistoryLimit: 10 | |
minReadySeconds: 0 | |
template: | |
metadata: | |
labels: | |
helm.sh/chart: ingress-nginx-4.12.0 | |
app.kubernetes.io/name: ingress-nginx | |
app.kubernetes.io/instance: ingress-nginx | |
app.kubernetes.io/version: "1.12.0" | |
app.kubernetes.io/part-of: ingress-nginx | |
app.kubernetes.io/managed-by: Helm | |
app.kubernetes.io/component: controller | |
spec: | |
dnsPolicy: ClusterFirst | |
containers: | |
- name: controller | |
image: registry.k8s.io/ingress-nginx/controller:v1.12.0@sha256:e6b8de175acda6ca913891f0f727bca4527e797d52688cbe9fec9040d6f6b6fa | |
imagePullPolicy: IfNotPresent | |
lifecycle: | |
preStop: | |
exec: | |
command: | |
- /wait-shutdown | |
args: | |
- /nginx-ingress-controller | |
- --publish-service=$(POD_NAMESPACE)/ingress-nginx-controller | |
- --election-id=ingress-nginx-leader | |
- --controller-class=k8s.io/ingress-nginx | |
- --ingress-class=nginx | |
- --configmap=$(POD_NAMESPACE)/ingress-nginx-controller | |
- --validating-webhook=:8443 | |
- --validating-webhook-certificate=/usr/local/certificates/cert | |
- --validating-webhook-key=/usr/local/certificates/key | |
securityContext: | |
runAsNonRoot: true | |
runAsUser: 101 | |
runAsGroup: 82 | |
allowPrivilegeEscalation: false | |
seccompProfile: | |
type: RuntimeDefault | |
capabilities: | |
drop: | |
- ALL | |
add: | |
- NET_BIND_SERVICE | |
readOnlyRootFilesystem: false | |
env: | |
- name: POD_NAME | |
valueFrom: | |
fieldRef: | |
fieldPath: metadata.name | |
- name: POD_NAMESPACE | |
valueFrom: | |
fieldRef: | |
fieldPath: metadata.namespace | |
- name: LD_PRELOAD | |
value: /usr/local/lib/libmimalloc.so | |
livenessProbe: | |
failureThreshold: 5 | |
httpGet: | |
path: /healthz | |
port: 10254 | |
scheme: HTTP | |
initialDelaySeconds: 10 | |
periodSeconds: 10 | |
successThreshold: 1 | |
timeoutSeconds: 1 | |
readinessProbe: | |
failureThreshold: 3 | |
httpGet: | |
path: /healthz | |
port: 10254 | |
scheme: HTTP | |
initialDelaySeconds: 10 | |
periodSeconds: 10 | |
successThreshold: 1 | |
timeoutSeconds: 1 | |
ports: | |
- name: http | |
containerPort: 80 | |
protocol: TCP | |
- name: https | |
containerPort: 443 | |
protocol: TCP | |
- name: webhook | |
containerPort: 8443 | |
protocol: TCP | |
volumeMounts: | |
- name: webhook-cert | |
mountPath: /usr/local/certificates/ | |
readOnly: true | |
resources: | |
requests: | |
cpu: 100m | |
memory: 90Mi | |
nodeSelector: | |
kubernetes.io/os: linux | |
serviceAccountName: ingress-nginx | |
terminationGracePeriodSeconds: 300 | |
volumes: | |
- name: webhook-cert | |
secret: | |
secretName: ingress-nginx-admission | |
--- | |
# Source: ingress-nginx/templates/controller-ingressclass.yaml | |
apiVersion: networking.k8s.io/v1 | |
kind: IngressClass | |
metadata: | |
labels: | |
helm.sh/chart: ingress-nginx-4.12.0 | |
app.kubernetes.io/name: ingress-nginx | |
app.kubernetes.io/instance: ingress-nginx | |
app.kubernetes.io/version: "1.12.0" | |
app.kubernetes.io/part-of: ingress-nginx | |
app.kubernetes.io/managed-by: Helm | |
app.kubernetes.io/component: controller | |
name: nginx | |
spec: | |
controller: k8s.io/ingress-nginx | |
--- | |
# Source: ingress-nginx/templates/controller-poddisruptionbudget.yaml | |
# PDB is not supported for DaemonSets. | |
# https://github.com/kubernetes/kubernetes/issues/108124 | |
--- | |
# Source: ingress-nginx/templates/admission-webhooks/validating-webhook.yaml | |
# before changing this value, check the required kubernetes version | |
# https://kubernetes.io/docs/reference/access-authn-authz/extensible-admission-controllers/#prerequisites | |
apiVersion: admissionregistration.k8s.io/v1 | |
kind: ValidatingWebhookConfiguration | |
metadata: | |
annotations: | |
labels: | |
helm.sh/chart: ingress-nginx-4.12.0 | |
app.kubernetes.io/name: ingress-nginx | |
app.kubernetes.io/instance: ingress-nginx | |
app.kubernetes.io/version: "1.12.0" | |
app.kubernetes.io/part-of: ingress-nginx | |
app.kubernetes.io/managed-by: Helm | |
app.kubernetes.io/component: admission-webhook | |
name: ingress-nginx-admission | |
webhooks: | |
- name: validate.nginx.ingress.kubernetes.io | |
matchPolicy: Equivalent | |
rules: | |
- apiGroups: | |
- networking.k8s.io | |
apiVersions: | |
- v1 | |
operations: | |
- CREATE | |
- UPDATE | |
resources: | |
- ingresses | |
failurePolicy: Fail | |
sideEffects: None | |
admissionReviewVersions: | |
- v1 | |
clientConfig: | |
service: | |
name: ingress-nginx-controller-admission | |
namespace: ingress-nginx | |
port: 443 | |
path: /networking/v1/ingresses | |
--- | |
# Source: ingress-nginx/templates/admission-webhooks/job-patch/serviceaccount.yaml | |
apiVersion: v1 | |
kind: ServiceAccount | |
metadata: | |
name: ingress-nginx-admission | |
namespace: ingress-nginx | |
annotations: | |
"helm.sh/hook": pre-install,pre-upgrade,post-install,post-upgrade | |
"helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded | |
labels: | |
helm.sh/chart: ingress-nginx-4.12.0 | |
app.kubernetes.io/name: ingress-nginx | |
app.kubernetes.io/instance: ingress-nginx | |
app.kubernetes.io/version: "1.12.0" | |
app.kubernetes.io/part-of: ingress-nginx | |
app.kubernetes.io/managed-by: Helm | |
app.kubernetes.io/component: admission-webhook | |
automountServiceAccountToken: true | |
--- | |
# Source: ingress-nginx/templates/admission-webhooks/job-patch/clusterrole.yaml | |
apiVersion: rbac.authorization.k8s.io/v1 | |
kind: ClusterRole | |
metadata: | |
name: ingress-nginx-admission | |
annotations: | |
"helm.sh/hook": pre-install,pre-upgrade,post-install,post-upgrade | |
"helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded | |
labels: | |
helm.sh/chart: ingress-nginx-4.12.0 | |
app.kubernetes.io/name: ingress-nginx | |
app.kubernetes.io/instance: ingress-nginx | |
app.kubernetes.io/version: "1.12.0" | |
app.kubernetes.io/part-of: ingress-nginx | |
app.kubernetes.io/managed-by: Helm | |
app.kubernetes.io/component: admission-webhook | |
rules: | |
- apiGroups: | |
- admissionregistration.k8s.io | |
resources: | |
- validatingwebhookconfigurations | |
verbs: | |
- get | |
- update | |
--- | |
# Source: ingress-nginx/templates/admission-webhooks/job-patch/clusterrolebinding.yaml | |
apiVersion: rbac.authorization.k8s.io/v1 | |
kind: ClusterRoleBinding | |
metadata: | |
name: ingress-nginx-admission | |
annotations: | |
"helm.sh/hook": pre-install,pre-upgrade,post-install,post-upgrade | |
"helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded | |
labels: | |
helm.sh/chart: ingress-nginx-4.12.0 | |
app.kubernetes.io/name: ingress-nginx | |
app.kubernetes.io/instance: ingress-nginx | |
app.kubernetes.io/version: "1.12.0" | |
app.kubernetes.io/part-of: ingress-nginx | |
app.kubernetes.io/managed-by: Helm | |
app.kubernetes.io/component: admission-webhook | |
roleRef: | |
apiGroup: rbac.authorization.k8s.io | |
kind: ClusterRole | |
name: ingress-nginx-admission | |
subjects: | |
- kind: ServiceAccount | |
name: ingress-nginx-admission | |
namespace: ingress-nginx | |
--- | |
# Source: ingress-nginx/templates/admission-webhooks/job-patch/role.yaml | |
apiVersion: rbac.authorization.k8s.io/v1 | |
kind: Role | |
metadata: | |
name: ingress-nginx-admission | |
namespace: ingress-nginx | |
annotations: | |
"helm.sh/hook": pre-install,pre-upgrade,post-install,post-upgrade | |
"helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded | |
labels: | |
helm.sh/chart: ingress-nginx-4.12.0 | |
app.kubernetes.io/name: ingress-nginx | |
app.kubernetes.io/instance: ingress-nginx | |
app.kubernetes.io/version: "1.12.0" | |
app.kubernetes.io/part-of: ingress-nginx | |
app.kubernetes.io/managed-by: Helm | |
app.kubernetes.io/component: admission-webhook | |
rules: | |
- apiGroups: | |
- "" | |
resources: | |
- secrets | |
verbs: | |
- get | |
- create | |
--- | |
# Source: ingress-nginx/templates/admission-webhooks/job-patch/rolebinding.yaml | |
apiVersion: rbac.authorization.k8s.io/v1 | |
kind: RoleBinding | |
metadata: | |
name: ingress-nginx-admission | |
namespace: ingress-nginx | |
annotations: | |
"helm.sh/hook": pre-install,pre-upgrade,post-install,post-upgrade | |
"helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded | |
labels: | |
helm.sh/chart: ingress-nginx-4.12.0 | |
app.kubernetes.io/name: ingress-nginx | |
app.kubernetes.io/instance: ingress-nginx | |
app.kubernetes.io/version: "1.12.0" | |
app.kubernetes.io/part-of: ingress-nginx | |
app.kubernetes.io/managed-by: Helm | |
app.kubernetes.io/component: admission-webhook | |
roleRef: | |
apiGroup: rbac.authorization.k8s.io | |
kind: Role | |
name: ingress-nginx-admission | |
subjects: | |
- kind: ServiceAccount | |
name: ingress-nginx-admission | |
namespace: ingress-nginx | |
--- | |
# Source: ingress-nginx/templates/admission-webhooks/job-patch/job-createSecret.yaml | |
apiVersion: batch/v1 | |
kind: Job | |
metadata: | |
name: ingress-nginx-admission-create | |
namespace: ingress-nginx | |
annotations: | |
"helm.sh/hook": pre-install,pre-upgrade | |
"helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded | |
labels: | |
helm.sh/chart: ingress-nginx-4.12.0 | |
app.kubernetes.io/name: ingress-nginx | |
app.kubernetes.io/instance: ingress-nginx | |
app.kubernetes.io/version: "1.12.0" | |
app.kubernetes.io/part-of: ingress-nginx | |
app.kubernetes.io/managed-by: Helm | |
app.kubernetes.io/component: admission-webhook | |
spec: | |
template: | |
metadata: | |
name: ingress-nginx-admission-create | |
labels: | |
helm.sh/chart: ingress-nginx-4.12.0 | |
app.kubernetes.io/name: ingress-nginx | |
app.kubernetes.io/instance: ingress-nginx | |
app.kubernetes.io/version: "1.12.0" | |
app.kubernetes.io/part-of: ingress-nginx | |
app.kubernetes.io/managed-by: Helm | |
app.kubernetes.io/component: admission-webhook | |
spec: | |
containers: | |
- name: create | |
image: registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.5.0@sha256:aaafd456bda110628b2d4ca6296f38731a3aaf0bf7581efae824a41c770a8fc4 | |
imagePullPolicy: IfNotPresent | |
args: | |
- create | |
- --host=ingress-nginx-controller-admission,ingress-nginx-controller-admission.$(POD_NAMESPACE).svc | |
- --namespace=$(POD_NAMESPACE) | |
- --secret-name=ingress-nginx-admission | |
env: | |
- name: POD_NAMESPACE | |
valueFrom: | |
fieldRef: | |
fieldPath: metadata.namespace | |
securityContext: | |
allowPrivilegeEscalation: false | |
capabilities: | |
drop: | |
- ALL | |
readOnlyRootFilesystem: true | |
runAsGroup: 65532 | |
runAsNonRoot: true | |
runAsUser: 65532 | |
seccompProfile: | |
type: RuntimeDefault | |
restartPolicy: OnFailure | |
serviceAccountName: ingress-nginx-admission | |
nodeSelector: | |
kubernetes.io/os: linux | |
--- | |
# Source: ingress-nginx/templates/admission-webhooks/job-patch/job-patchWebhook.yaml | |
apiVersion: batch/v1 | |
kind: Job | |
metadata: | |
name: ingress-nginx-admission-patch | |
namespace: ingress-nginx | |
annotations: | |
"helm.sh/hook": post-install,post-upgrade | |
"helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded | |
labels: | |
helm.sh/chart: ingress-nginx-4.12.0 | |
app.kubernetes.io/name: ingress-nginx | |
app.kubernetes.io/instance: ingress-nginx | |
app.kubernetes.io/version: "1.12.0" | |
app.kubernetes.io/part-of: ingress-nginx | |
app.kubernetes.io/managed-by: Helm | |
app.kubernetes.io/component: admission-webhook | |
spec: | |
template: | |
metadata: | |
name: ingress-nginx-admission-patch | |
labels: | |
helm.sh/chart: ingress-nginx-4.12.0 | |
app.kubernetes.io/name: ingress-nginx | |
app.kubernetes.io/instance: ingress-nginx | |
app.kubernetes.io/version: "1.12.0" | |
app.kubernetes.io/part-of: ingress-nginx | |
app.kubernetes.io/managed-by: Helm | |
app.kubernetes.io/component: admission-webhook | |
spec: | |
containers: | |
- name: patch | |
image: registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.5.0@sha256:aaafd456bda110628b2d4ca6296f38731a3aaf0bf7581efae824a41c770a8fc4 | |
imagePullPolicy: IfNotPresent | |
args: | |
- patch | |
- --webhook-name=ingress-nginx-admission | |
- --namespace=$(POD_NAMESPACE) | |
- --patch-mutating=false | |
- --secret-name=ingress-nginx-admission | |
- --patch-failure-policy=Fail | |
env: | |
- name: POD_NAMESPACE | |
valueFrom: | |
fieldRef: | |
fieldPath: metadata.namespace | |
securityContext: | |
allowPrivilegeEscalation: false | |
capabilities: | |
drop: | |
- ALL | |
readOnlyRootFilesystem: true | |
runAsGroup: 65532 | |
runAsNonRoot: true | |
runAsUser: 65532 | |
seccompProfile: | |
type: RuntimeDefault | |
restartPolicy: OnFailure | |
serviceAccountName: ingress-nginx-admission | |
nodeSelector: | |
kubernetes.io/os: linux |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment