Files
infrastructure/clusters/cl01tl/manifests/external-secrets/ValidatingWebhookConfiguration-secretstore-validate.yaml
gitea-bot 2b964109c4 Automated Manifest Update (#4929)
This PR contains newly rendered Kubernetes manifests automatically generated by the CI workflow.

### Details
- **Trigger**: `pull_request` by `@alexlebens`
- **Commit**: `96eae46` (on `96eae46b5e53fce0c6d8a889e0e309f149806d6e`)
- **Charts Updated**: `kube-prometheus-stack`

### Update Details (2026-03-20 21:51 UTC)
- **Trigger**: `pull_request` by `@alexlebens`
- **Commit**: `c1175d4` (on `c1175d4cbd0095bb5298039d31fb1ece43f7a309`)
- **Charts Updated**: `postiz`

### Update Details (2026-03-20 21:52 UTC)
- **Trigger**: `pull_request` by `@alexlebens`
- **Commit**: `71eddc4` (on `71eddc44e349ab5fb7d21a25ed194b2439f524e3`)
- **Charts Updated**: `external-secrets`

Reviewed-on: #4929
Co-authored-by: gitea-bot <gitea-bot@alexlebens.net>
Co-committed-by: gitea-bot <gitea-bot@alexlebens.net>
2026-03-20 21:55:18 +00:00

44 lines
1.4 KiB
YAML

apiVersion: admissionregistration.k8s.io/v1
kind: ValidatingWebhookConfiguration
metadata:
name: secretstore-validate
labels:
helm.sh/chart: external-secrets-2.2.0
app.kubernetes.io/name: external-secrets-webhook
app.kubernetes.io/instance: external-secrets
app.kubernetes.io/version: "v2.2.0"
app.kubernetes.io/managed-by: Helm
external-secrets.io/component: webhook
webhooks:
- name: "validate.secretstore.external-secrets.io"
rules:
- apiGroups: ["external-secrets.io"]
apiVersions: ["v1"]
operations: ["CREATE", "UPDATE", "DELETE"]
resources: ["secretstores"]
scope: "Namespaced"
clientConfig:
service:
namespace: external-secrets
name: external-secrets-webhook
path: /validate-external-secrets-io-v1-secretstore
admissionReviewVersions: ["v1", "v1beta1"]
sideEffects: None
timeoutSeconds: 5
failurePolicy: Fail
- name: "validate.clustersecretstore.external-secrets.io"
rules:
- apiGroups: ["external-secrets.io"]
apiVersions: ["v1"]
operations: ["CREATE", "UPDATE", "DELETE"]
resources: ["clustersecretstores"]
scope: "Cluster"
clientConfig:
service:
namespace: external-secrets
name: external-secrets-webhook
path: /validate-external-secrets-io-v1-clustersecretstore
admissionReviewVersions: ["v1", "v1beta1"]
sideEffects: None
timeoutSeconds: 5