52 lines
1.6 KiB
YAML
52 lines
1.6 KiB
YAML
apiVersion: admissionregistration.k8s.io/v1
|
|
kind: MutatingWebhookConfiguration
|
|
metadata:
|
|
name: {{ include "hami-vgpu.scheduler.webhook" . }}
|
|
webhooks:
|
|
- admissionReviewVersions:
|
|
- v1beta1
|
|
clientConfig:
|
|
{{- if .Values.scheduler.admissionWebhook.customURL.enabled }}
|
|
url: https://{{ .Values.scheduler.admissionWebhook.customURL.host}}:{{.Values.scheduler.admissionWebhook.customURL.port}}{{.Values.scheduler.admissionWebhook.customURL.path}}
|
|
{{- else }}
|
|
service:
|
|
name: {{ include "hami-vgpu.scheduler" . }}
|
|
namespace: {{ .Release.Namespace }}
|
|
path: /webhook
|
|
port: {{ .Values.scheduler.service.httpPort }}
|
|
{{- end }}
|
|
failurePolicy: {{ .Values.scheduler.admissionWebhook.failurePolicy }}
|
|
matchPolicy: Equivalent
|
|
name: vgpu.hami.io
|
|
namespaceSelector:
|
|
matchExpressions:
|
|
- key: hami.io/webhook
|
|
operator: NotIn
|
|
values:
|
|
- ignore
|
|
{{- if .Values.scheduler.admissionWebhook.whitelistNamespaces }}
|
|
- key: kubernetes.io/metadata.name
|
|
operator: NotIn
|
|
values:
|
|
{{- toYaml .Values.scheduler.admissionWebhook.whitelistNamespaces | nindent 10 }}
|
|
{{- end }}
|
|
objectSelector:
|
|
matchExpressions:
|
|
- key: hami.io/webhook
|
|
operator: NotIn
|
|
values:
|
|
- ignore
|
|
reinvocationPolicy: {{ .Values.scheduler.admissionWebhook.reinvocationPolicy }}
|
|
rules:
|
|
- apiGroups:
|
|
- ""
|
|
apiVersions:
|
|
- v1
|
|
operations:
|
|
- CREATE
|
|
resources:
|
|
- pods
|
|
scope: '*'
|
|
sideEffects: None
|
|
timeoutSeconds: 10
|