functions/charts/fission-all/templates/webhook-server/webhooks.yaml at main

mirror of https://github.com/hanzoai/functions.git synced 2026-10-30 15:04:37 +00:00

Files

T

zeekay bd81b9f2e2 canonical: hanzoai imports + hanzo.ai CRD group (de-fission)

Module github.com/fission/fission -> github.com/hanzoai/functions (288 files).
CRD API group fission.io -> hanzo.ai (67 files): functions.hanzo.ai,
environments.hanzo.ai, httptriggers.hanzo.ai, messagequeuetriggers.hanzo.ai,
joining apps.hanzo.ai under the one house group. Doc URLs preserved. Builds green.

Matches the cloud contract: clients/functions, /v1/functions, App CR role
"function". Remaining: fork the env images + the live CRD-group migration
(demo-only today, low risk).

2026-07-19 23:37:32 -07:00

204 lines

4.4 KiB

YAML

Raw Permalink Blame History

 ---
 {{- $caCert := include "webhook.caBundleCertPEM" . -}}
 {{- $crtPEM := include "webhook.certPEM" . -}}
 {{- $keyPEM := include "webhook.keyPEM" . -}}
 {{- $certManagerEnabled := $.Values.webhook.certManager.enabled }}
 {{- $caBundleValue := "" -}}
 {{- if $certManagerEnabled }}
 {{- $caBundleValue = "Cg==" -}}
 {{- else }}
 {{- $caBundleValue = ternary (b64enc $caCert) (b64enc (trim $crtPEM)) (empty $crtPEM)  -}}
 {{- end }}
 ---
 apiVersion: admissionregistration.k8s.io/v1
 kind: MutatingWebhookConfiguration
 metadata:
   creationTimestamp: null
   name: fission-mutating-webhooks
   {{- if $certManagerEnabled }}
   annotations:
     cert-manager.io/inject-ca-from: "{{ .Release.Namespace }}/fission-webhook-cert"
   {{- end }}
 webhooks:
 - admissionReviewVersions:
   - v1
   clientConfig:
     caBundle: {{ $caBundleValue }}
     service:
       name: webhook-service
       namespace:  {{ .Release.Namespace }}
       path: /mutate-fission-io-v1-package
   failurePolicy: Fail
   name: mpackage.hanzo.ai
   rules:
   - apiGroups:
     - hanzo.ai
     apiVersions:
     - v1
     operations:
     - CREATE
     - UPDATE
     resources:
     - packages
   sideEffects: None
 ---
 apiVersion: admissionregistration.k8s.io/v1
 kind: ValidatingWebhookConfiguration
 metadata:
   creationTimestamp: null
   name: fission-validating-webhooks
   {{- if $certManagerEnabled }}
   annotations:
     cert-manager.io/inject-ca-from: "{{ .Release.Namespace }}/fission-webhook-cert"
   {{- end }}
 webhooks:
 - admissionReviewVersions:
   - v1
   clientConfig:
     caBundle: {{ $caBundleValue }}
     service:
       name: webhook-service
       namespace:  {{ .Release.Namespace }}
       path: /validate-fission-io-v1-environment
   failurePolicy: Fail
   name: venvironment.hanzo.ai
   rules:
   - apiGroups:
     - hanzo.ai
     apiVersions:
     - v1
     operations:
     - CREATE
     resources:
     - environments
   sideEffects: None
 - admissionReviewVersions:
   - v1
   clientConfig:
     caBundle: {{ $caBundleValue }}
     service:
       name: webhook-service
       namespace:  {{ .Release.Namespace }}
       path: /validate-fission-io-v1-function
   failurePolicy: Fail
   name: vfunction.hanzo.ai
   rules:
   - apiGroups:
     - hanzo.ai
     apiVersions:
     - v1
     operations:
     - CREATE
     - UPDATE
     resources:
     - functions
   sideEffects: None
 - admissionReviewVersions:
   - v1
   clientConfig:
     caBundle: {{ $caBundleValue }}
     service:
       name: webhook-service
       namespace:  {{ .Release.Namespace }}
       path: /validate-fission-io-v1-httptrigger
   failurePolicy: Fail
   name: vhttptrigger.hanzo.ai
   rules:
   - apiGroups:
     - hanzo.ai
     apiVersions:
     - v1
     operations:
     - CREATE
     - UPDATE
     resources:
     - httptriggers
   sideEffects: None
 - admissionReviewVersions:
   - v1
   clientConfig:
     caBundle: {{ $caBundleValue }}
     service:
       name: webhook-service
       namespace:  {{ .Release.Namespace }}
       path: /validate-fission-io-v1-kuberneteswatchtrigger
   failurePolicy: Fail
   name: vkuberneteswatchtrigger.hanzo.ai
   rules:
   - apiGroups:
     - hanzo.ai
     apiVersions:
     - v1
     operations:
     - CREATE
     - UPDATE
     resources:
     - kuberneteswatchtriggers
   sideEffects: None
 - admissionReviewVersions:
   - v1
   clientConfig:
     caBundle: {{ $caBundleValue }}
     service:
       name: webhook-service
       namespace:  {{ .Release.Namespace }}
       path: /validate-fission-io-v1-messagequeuetrigger
   failurePolicy: Fail
   name: vmessagequeuetrigger.hanzo.ai
   rules:
   - apiGroups:
     - hanzo.ai
     apiVersions:
     - v1
     operations:
     - CREATE
     - UPDATE
     resources:
     - messagequeuetriggers
   sideEffects: None
 - admissionReviewVersions:
   - v1
   clientConfig:
     caBundle: {{ $caBundleValue }}
     service:
       name: webhook-service
       namespace:  {{ .Release.Namespace }}
       path: /validate-fission-io-v1-package
   failurePolicy: Fail
   name: vpackage.hanzo.ai
   rules:
   - apiGroups:
     - hanzo.ai
     apiVersions:
     - v1
     operations:
     - CREATE
     - UPDATE
     resources:
     - packages
   sideEffects: None
 - admissionReviewVersions:
   - v1
   clientConfig:
     caBundle: {{ $caBundleValue }}
     service:
       name: webhook-service
       namespace:  {{ .Release.Namespace }}
       path: /validate-fission-io-v1-timetrigger
   failurePolicy: Fail
   name: vtimetrigger.hanzo.ai
   rules:
   - apiGroups:
     - hanzo.ai
     apiVersions:
     - v1
     operations:
     - CREATE
     - UPDATE
     resources:
     - timetriggers
   sideEffects: None

204 lines 4.4 KiB YAML Raw Permalink Blame History

204 lines

4.4 KiB

YAML

Raw Permalink Blame History