| apiVersion: admissionregistration.k8s.io/v1 |
| kind: MutatingWebhookConfiguration |
| metadata: |
| labels: |
| app: sidecar-injector |
| name: w-istio-sidecar-injector-dubbo-system |
| |
| webhooks: |
| - admissionReviewVersions: |
| - v1beta1 |
| - v1 |
| clientConfig: |
| service: |
| name: istiod |
| namespace: dubbo-system |
| path: /inject |
| port: 443 |
| failurePolicy: Fail |
| matchPolicy: Equivalent |
| name: rev.namespace.sidecar-injector.istio.io |
| namespaceSelector: |
| matchExpressions: |
| - key: istio.io/rev |
| operator: In |
| values: |
| - default |
| - key: istio-injection |
| operator: DoesNotExist |
| objectSelector: |
| matchExpressions: |
| - key: istio.io/rev |
| operator: NotIn |
| values: |
| - canary |
| reinvocationPolicy: Never |
| rules: |
| - apiGroups: |
| - "" |
| apiVersions: |
| - v1 |
| operations: |
| - CREATE |
| resources: |
| - pods |
| scope: '*' |
| sideEffects: None |
| timeoutSeconds: 10 |
| - admissionReviewVersions: |
| - v1beta1 |
| - v1 |
| clientConfig: |
| service: |
| name: istiod |
| namespace: dubbo-system |
| path: /inject |
| port: 443 |
| failurePolicy: Fail |
| matchPolicy: Equivalent |
| name: rev.object.sidecar-injector.istio.io |
| namespaceSelector: |
| matchExpressions: |
| - key: istio.io/rev |
| operator: DoesNotExist |
| - key: istio-injection |
| operator: DoesNotExist |
| objectSelector: |
| matchExpressions: |
| - key: sidecar.istio.io/inject |
| operator: NotIn |
| values: |
| - "false" |
| - key: istio.io/rev |
| operator: In |
| values: |
| - default |
| reinvocationPolicy: Never |
| rules: |
| - apiGroups: |
| - "" |
| apiVersions: |
| - v1 |
| operations: |
| - CREATE |
| resources: |
| - pods |
| scope: '*' |
| sideEffects: None |
| timeoutSeconds: 10 |
| - admissionReviewVersions: |
| - v1beta1 |
| - v1 |
| clientConfig: |
| service: |
| name: istiod |
| namespace: dubbo-system |
| path: /inject |
| port: 443 |
| failurePolicy: Fail |
| matchPolicy: Equivalent |
| name: namespace.sidecar-injector.istio.io |
| namespaceSelector: |
| matchExpressions: |
| - key: istio-injection |
| operator: In |
| values: |
| - enabled |
| objectSelector: |
| matchExpressions: |
| - key: sidecar.istio.io/inject |
| operator: NotIn |
| values: |
| - "false" |
| reinvocationPolicy: Never |
| rules: |
| - apiGroups: |
| - "" |
| apiVersions: |
| - v1 |
| operations: |
| - CREATE |
| resources: |
| - pods |
| scope: '*' |
| sideEffects: None |
| timeoutSeconds: 10 |
| - admissionReviewVersions: |
| - v1beta1 |
| - v1 |
| clientConfig: |
| service: |
| name: istiod |
| namespace: dubbo-system |
| path: /inject |
| port: 443 |
| failurePolicy: Fail |
| matchPolicy: Equivalent |
| name: object.sidecar-injector.istio.io |
| namespaceSelector: |
| matchExpressions: |
| - key: istio-injection |
| operator: DoesNotExist |
| - key: istio.io/rev |
| operator: DoesNotExist |
| objectSelector: |
| matchExpressions: |
| - key: sidecar.istio.io/inject |
| operator: In |
| values: |
| - "true" |
| - key: istio.io/rev |
| operator: DoesNotExist |
| reinvocationPolicy: Never |
| rules: |
| - apiGroups: |
| - "" |
| apiVersions: |
| - v1 |
| operations: |
| - CREATE |
| resources: |
| - pods |
| scope: '*' |
| sideEffects: None |
| timeoutSeconds: 10 |
| - admissionReviewVersions: |
| - v1beta1 |
| - v1 |
| clientConfig: |
| service: |
| name: istiod |
| namespace: dubbo-system |
| path: /inject |
| port: 443 |
| failurePolicy: Fail |
| matchPolicy: Equivalent |
| name: auto.sidecar-injector.istio.io |
| namespaceSelector: |
| matchExpressions: |
| - key: istio-injection |
| operator: DoesNotExist |
| - key: istio.io/rev |
| operator: DoesNotExist |
| objectSelector: |
| matchExpressions: |
| - key: sidecar.istio.io/inject |
| operator: DoesNotExist |
| - key: istio.io/rev |
| operator: DoesNotExist |
| reinvocationPolicy: Never |
| rules: |
| - apiGroups: |
| - "" |
| apiVersions: |
| - v1 |
| operations: |
| - CREATE |
| resources: |
| - pods |
| scope: '*' |
| sideEffects: None |
| timeoutSeconds: 10 |