Edge-health Webhook

Edge-health webhook 配置示例

edge-health/edge-health-webhook.yaml 

  1. ---
  2. apiVersion: admissionregistration.k8s.io/v1
  3. kind: MutatingWebhookConfiguration
  4. metadata:
  5.   name: edge-health-admission
  6. webhooks:
  7.   - admissionReviewVersions:
  8.       - v1beta1
  9.     clientConfig:
  10.       caBundle: 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
  11.       service:
  12.         namespace: edge-system
  13.         name: edge-health-admission
  14.         path: /node-taint
  15.     failurePolicy: Ignore
  16.     matchPolicy: Exact
  17.     name: node-taint.k8s.io
  18.     namespaceSelector: {}
  19.     objectSelector: {}
  20.     reinvocationPolicy: Never
  21.     rules:
  22.       - apiGroups:
  23.           - '*'
  24.         apiVersions:
  25.           - '*'
  26.         operations:
  27.           - UPDATE
  28.         resources:
  29.           - nodes
  30.         scope: '*'
  31.     sideEffects: None
  32.     timeoutSeconds: 5
  33.   - admissionReviewVersions:
  34.       - v1beta1
  35.     clientConfig:
  36.       caBundle: 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
  37.       service:
  38.         namespace: edge-system
  39.         name: edge-health-admission
  40.         path: /endpoint
  41.     failurePolicy: Ignore
  42.     matchPolicy: Exact
  43.     name: endpoint.k8s.io
  44.     namespaceSelector: {}
  45.     objectSelector: {}
  46.     reinvocationPolicy: Never
  47.     rules:
  48.       - apiGroups:
  49.           - '*'
  50.         apiVersions:
  51.           - '*'
  52.         operations:
  53.           - UPDATE
  54.         resources:
  55.           - endpoints
  56.         scope: '*'
  57.     sideEffects: None
  58.     timeoutSeconds: 5

最后修改 June 15, 2021 : Fixed error links and paths (fef537b)