Updates to k8s objects

k8s/configmap.yaml

@@ -1,4 +1,3 @@
----
 apiVersion: v1
 kind: ConfigMap
 metadata:
@@ -16,3 +15,13 @@ data:
     - goharbor/redis-photon
     - goharbor/registry-photon
     - goharbor/trivy-adapter-photon
+    kubernetes:
+      namespace: ingress-nginx
+      service-name: webhook
+    certificate-authority:
+      certificate: |
+        -----BEGIN CERTIFICATE-----
+        -----END CERTIFICATE-----
+      private-key: |
+        -----BEGIN RSA PRIVATE KEY-----
+        -----END RSA PRIVATE KEY-----    

k8s/daemonset.yaml

@@ -1,8 +1,7 @@
----
 apiVersion: apps/v1
 kind: DaemonSet
 metadata:
-  name: mutating-webhool
+  name: mutating-webhook
   labels:
     app: mutating-webhook
 spec:

k8s/service.yaml

@@ -1,4 +1,3 @@
----
 apiVersion: v1
 kind: Service
 metadata:

k8s/webhook.yaml

@@ -1,18 +1,30 @@
 ---
-apiVersion: admissionregistration.k8s.io/v1beta1
+apiVersion: admissionregistration.k8s.io/v1
 kind: MutatingWebhookConfiguration
 metadata:
   name: pod-mutation
 webhooks:
-  - name: pod-mutation.default.svc
-    clientConfig:
-      service:
-        name: webhook
-        namespace: default
-        path: "/api/v1/mutate/pod"
-    rules:
-      - operations: ["CREATE", ]
-        apiGroups: [""]
-        apiVersions: ["v1"]
-        resources: ["pods"]
-    failurePolicy: Ignore
+- name: pod-mutation.ingress-nginx.svc
+  clientConfig:
+    service:
+      name: webhook
+      namespace: ingress-nginx 
+      path: "/api/v1/mutate/pod"
+      port: 443
+    caBundle: Base64 encoded Certificate Authority PEM file
+  rules:
+  - operations:
+    - "CREATE"
+    - "UPDATE"
+    apiVersions:
+    - "*"
+    apiGroups:
+    - "*"
+    resources: 
+    - "pods/*"
+    scope: "Namespaced"
+  sideEffects: None
+  admissionReviewVersions:
+  - "v1"
+  failurePolicy: Ignore
+