kustomization.yaml 4.5 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144
  1. # Adds namespace to all resources.
  2. namespace: nodb-system
  3. # Value of this field is prepended to the
  4. # names of all resources, e.g. a deployment named
  5. # "wordpress" becomes "alices-wordpress".
  6. # Note that it should also match with the prefix (text before '-') of the namespace
  7. # field above.
  8. namePrefix: nodb-
  9. # Labels to add to all resources and selectors.
  10. #labels:
  11. #- includeSelectors: true
  12. # pairs:
  13. # someName: someValue
  14. resources:
  15. - ../crd
  16. - ../rbac
  17. - ../manager
  18. # [WEBHOOK] To enable webhook, uncomment all the sections with [WEBHOOK] prefix including the one in
  19. # crd/kustomization.yaml
  20. #- ../webhook
  21. # [CERTMANAGER] To enable cert-manager, uncomment all sections with 'CERTMANAGER'. 'WEBHOOK' components are required.
  22. #- ../certmanager
  23. # [PROMETHEUS] To enable prometheus monitor, uncomment all sections with 'PROMETHEUS'.
  24. #- ../prometheus
  25. patchesStrategicMerge:
  26. # Protect the /metrics endpoint by putting it behind auth.
  27. # If you want your controller-manager to expose the /metrics
  28. # endpoint w/o any authn/z, please comment the following line.
  29. - manager_auth_proxy_patch.yaml
  30. # [WEBHOOK] To enable webhook, uncomment all the sections with [WEBHOOK] prefix including the one in
  31. # crd/kustomization.yaml
  32. #- manager_webhook_patch.yaml
  33. # [CERTMANAGER] To enable cert-manager, uncomment all sections with 'CERTMANAGER'.
  34. # Uncomment 'CERTMANAGER' sections in crd/kustomization.yaml to enable the CA injection in the admission webhooks.
  35. # 'CERTMANAGER' needs to be enabled to use ca injection
  36. #- webhookcainjection_patch.yaml
  37. # [CERTMANAGER] To enable cert-manager, uncomment all sections with 'CERTMANAGER' prefix.
  38. # Uncomment the following replacements to add the cert-manager CA injection annotations
  39. #replacements:
  40. # - source: # Add cert-manager annotation to ValidatingWebhookConfiguration, MutatingWebhookConfiguration and CRDs
  41. # kind: Certificate
  42. # group: cert-manager.io
  43. # version: v1
  44. # name: serving-cert # this name should match the one in certificate.yaml
  45. # fieldPath: .metadata.namespace # namespace of the certificate CR
  46. # targets:
  47. # - select:
  48. # kind: ValidatingWebhookConfiguration
  49. # fieldPaths:
  50. # - .metadata.annotations.[cert-manager.io/inject-ca-from]
  51. # options:
  52. # delimiter: '/'
  53. # index: 0
  54. # create: true
  55. # - select:
  56. # kind: MutatingWebhookConfiguration
  57. # fieldPaths:
  58. # - .metadata.annotations.[cert-manager.io/inject-ca-from]
  59. # options:
  60. # delimiter: '/'
  61. # index: 0
  62. # create: true
  63. # - select:
  64. # kind: CustomResourceDefinition
  65. # fieldPaths:
  66. # - .metadata.annotations.[cert-manager.io/inject-ca-from]
  67. # options:
  68. # delimiter: '/'
  69. # index: 0
  70. # create: true
  71. # - source:
  72. # kind: Certificate
  73. # group: cert-manager.io
  74. # version: v1
  75. # name: serving-cert # this name should match the one in certificate.yaml
  76. # fieldPath: .metadata.name
  77. # targets:
  78. # - select:
  79. # kind: ValidatingWebhookConfiguration
  80. # fieldPaths:
  81. # - .metadata.annotations.[cert-manager.io/inject-ca-from]
  82. # options:
  83. # delimiter: '/'
  84. # index: 1
  85. # create: true
  86. # - select:
  87. # kind: MutatingWebhookConfiguration
  88. # fieldPaths:
  89. # - .metadata.annotations.[cert-manager.io/inject-ca-from]
  90. # options:
  91. # delimiter: '/'
  92. # index: 1
  93. # create: true
  94. # - select:
  95. # kind: CustomResourceDefinition
  96. # fieldPaths:
  97. # - .metadata.annotations.[cert-manager.io/inject-ca-from]
  98. # options:
  99. # delimiter: '/'
  100. # index: 1
  101. # create: true
  102. # - source: # Add cert-manager annotation to the webhook Service
  103. # kind: Service
  104. # version: v1
  105. # name: webhook-service
  106. # fieldPath: .metadata.name # namespace of the service
  107. # targets:
  108. # - select:
  109. # kind: Certificate
  110. # group: cert-manager.io
  111. # version: v1
  112. # fieldPaths:
  113. # - .spec.dnsNames.0
  114. # - .spec.dnsNames.1
  115. # options:
  116. # delimiter: '.'
  117. # index: 0
  118. # create: true
  119. # - source:
  120. # kind: Service
  121. # version: v1
  122. # name: webhook-service
  123. # fieldPath: .metadata.namespace # namespace of the service
  124. # targets:
  125. # - select:
  126. # kind: Certificate
  127. # group: cert-manager.io
  128. # version: v1
  129. # fieldPaths:
  130. # - .spec.dnsNames.0
  131. # - .spec.dnsNames.1
  132. # options:
  133. # delimiter: '.'
  134. # index: 1
  135. # create: true