test/control-plane/cp.yaml

# Licensed to the Apache Software Foundation (ASF) under one or more
# contributor license agreements.  See the NOTICE file distributed with
# this work for additional information regarding copyright ownership.
# The ASF licenses this file to You under the Apache License, Version 2.0
# (the "License"); you may not use this file except in compliance with
# the License.  You may obtain a copy of the License at
#
#     http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.

---
apiVersion: v1
kind: Namespace
metadata:
  name: dubbo-system
  labels:
    dubbo.io/system-namespace: "true"

---
apiVersion: admissionregistration.k8s.io/v1
kind: MutatingWebhookConfiguration
metadata:
  name: dubbo-admission-mutating-webhook-configuration
  namespace: dubbo-system
  labels:
    app: dubbo-control-plane
    app.kubernetes.io/name: dubbo
    app.kubernetes.io/instance: dubbo
webhooks:
  - name: mesh.defaulter.dubbo-admission.dubbo.io
    admissionReviewVersions: ["v1"]
    failurePolicy: Fail
    namespaceSelector:
      matchExpressions:
        - key: kubernetes.io/metadata.name
          operator: NotIn
          values: ["kube-system"]
    clientConfig:
      caBundle: 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
      url: https://10.23.132.51:5443/default-dubbo-io-v1alpha1-mesh
    rules:
      - apiGroups:
          - dubbo.io
        apiVersions:
          - v1alpha1
        operations:
          - CREATE
          - UPDATE
        resources:
          - meshes
    sideEffects: None
  - name: owner-reference.dubbo-admission.dubbo.io
    admissionReviewVersions: ["v1"]
    failurePolicy: Fail
    namespaceSelector:
      matchExpressions:
        - key: kubernetes.io/metadata.name
          operator: NotIn
          values: ["dubbo-system"]
    clientConfig:
      caBundle: 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
      url: https://10.23.132.51:5443/owner-reference-dubbo-io-v1alpha1
    rules:
      - apiGroups:
          - dubbo.io
        apiVersions:
          - v1alpha1
        operations:
          - CREATE
        resources:
          - conditionroutes
          - dynamicconfigs
          - tagroutes
    sideEffects: None

---
apiVersion: admissionregistration.k8s.io/v1
kind: ValidatingWebhookConfiguration
metadata:
  name: dubbo-validating-webhook-configuration
  namespace: dubbo-system
  labels:
    app: dubbo-control-plane
    app.kubernetes.io/name: dubbo
    app.kubernetes.io/instance: dubbo
webhooks:
  - name: validator.dubbo-admission.dubbo.io
    admissionReviewVersions: ["v1"]
    failurePolicy: Fail
    namespaceSelector:
      matchExpressions:
        - key: kubernetes.io/metadata.name
          operator: NotIn
          values: ["kube-system"]
    clientConfig:
      caBundle: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSURZakNDQWtxZ0F3SUJBZ0lVR09zN2R6N0Z2dFZLYVY0Y0ZDRDZHUm9qMjlRd0RRWUpLb1pJaHZjTkFRRUwKQlFBd1NURUxNQWtHQTFVRUJoTUNlbWd4Q3pBSkJnTlZCQWNUQW1KcU1Rc3dDUVlEVlFRS0V3SmlhakVMTUFrRwpBMVVFQ3hNQ1EwRXhFekFSQmdOVkJBTVRDa3QxWW1WeWJtVjBaWE13SGhjTk1qUXdNekkxTVRBeE56QXdXaGNOCk1qa3dNekkwTVRBeE56QXdXakJKTVFzd0NRWURWUVFHRXdKNmFERUxNQWtHQTFVRUJ4TUNZbW94Q3pBSkJnTlYKQkFvVEFtSnFNUXN3Q1FZRFZRUUxFd0pEUVRFVE1CRUdBMVVFQXhNS1MzVmlaWEp1WlhSbGN6Q0NBU0l3RFFZSgpLb1pJaHZjTkFRRUJCUUFEZ2dFUEFEQ0NBUW9DZ2dFQkFLV0JVajltL2VnZDlpRmp4Zit3aTlQRFZvZXJsZ0plCjl2eHZvMVFRREJXNE5nT3NRWXkvbFR4OGtxd0hzbDdBQkR5SytUN1YzdGQ5VDg4V2ZVNmRZL0F3aStIUVJ5akUKMkt3U1dWQkRtdEMxLzdWTm9uYm5MOUpibWdwb21XRGNHNUovMEZsWHpwZkJPcXlleERjR2RCY0l4N0hqdFljeQpEWDZJTjJpaUhtQ0tjSFlqZHBEVjZEeTlKcVNCZEJmR2dlK1k5MzB3enJ5aEFlZjJqb1VxSXBMblVtUWhMVm1VCjJ0ZDJ0Uy9NY1NEcFpiOExJTlYvNndpT2JrdjVFRFRoT2pBMTlSQWpkVDVrRkp3TWZIM3BVMkozanliWExyUjMKMGVmdFc1N1dsZi92OUlVblRlWktxTFY4VG9pRitINndKeEF6bDFUemVpWVYybDd3c0lNblZxTUNBd0VBQWFOQwpNRUF3RGdZRFZSMFBBUUgvQkFRREFnRUdNQThHQTFVZEV3RUIvd1FGTUFNQkFmOHdIUVlEVlIwT0JCWUVGRlFPCnYwRnFJVldERHl1T0xaeFRZZmlMeTh5c01BMEdDU3FHU0liM0RRRUJDd1VBQTRJQkFRQmE4Mzg4YjZYVjNFZGMKMi9kd21hTkttYVYxWmo2ZGJMSHQwcUk2OUVUV0JKOWJxdVREeWg3SEJBY01vTHVic3g5bVNLbjRReUZ5NjZoYQpFYWN6S3Rrak01MjhyRDN4WXhXaWI1M2Z4eDRXWmlobmRpNjhHaUUyNjRWNkw3SC9SeC9SSU8wY3ZkSHFkNTI1CkFNMjZtYzR6NDRJYlYya2liWGJSNVIwbU9ZbGtMby9DUGJhTUtzY1hFTEVvenBVZjdlTUQzYnlPT2ZYcU9oVDEKQm42NUNPZTR2dGxmT0FQMjl1bmx4cS91Nm1rclRnbmF1ZU1IRWFUT2lEVU1mZ0MzUzdZQmtjK3Nsdlc3QlJodgovUVpwSnNldHJoRjJyOVVTZ1dHc3U5dXc3cmorOTlkR0FrT1RmWGhHWUNTaldRSE4wMzVMTHFXa0E3UUU1cGl0CjY4N29pRnpHCi0tLS0tRU5EIENFUlRJRklDQVRFLS0tLS0K
      url: https://10.23.132.51:5443/validate-dubbo-io-v1alpha1
    rules:
      - apiGroups:
          - dubbo.io
        apiVersions:
          - v1alpha1
        operations:
          - CREATE
          - UPDATE
          - DELETE
        resources:
          - conditionroutes
          - dataplanes
          - dataplaneinsights
          - datasources
          - dynamicconfigs
          - mappings
          - meshes
          - meshinsights
          - metadata
          - secrets
          - servicenamemappings
          - tagroutes
          - zoneegresses
          - zoneingresses
          - zoneingressinsights
          - zoneinsights
          - zones

    sideEffects: None
  - name: service.validator.dubbo-admission.dubbo.io
    admissionReviewVersions: ["v1"]
    failurePolicy: Ignore
    namespaceSelector:
      matchExpressions:
        - key: kubernetes.io/metadata.name
          operator: NotIn
          values: ["kube-system"]
    clientConfig:
      caBundle: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSURZakNDQWtxZ0F3SUJBZ0lVR09zN2R6N0Z2dFZLYVY0Y0ZDRDZHUm9qMjlRd0RRWUpLb1pJaHZjTkFRRUwKQlFBd1NURUxNQWtHQTFVRUJoTUNlbWd4Q3pBSkJnTlZCQWNUQW1KcU1Rc3dDUVlEVlFRS0V3SmlhakVMTUFrRwpBMVVFQ3hNQ1EwRXhFekFSQmdOVkJBTVRDa3QxWW1WeWJtVjBaWE13SGhjTk1qUXdNekkxTVRBeE56QXdXaGNOCk1qa3dNekkwTVRBeE56QXdXakJKTVFzd0NRWURWUVFHRXdKNmFERUxNQWtHQTFVRUJ4TUNZbW94Q3pBSkJnTlYKQkFvVEFtSnFNUXN3Q1FZRFZRUUxFd0pEUVRFVE1CRUdBMVVFQXhNS1MzVmlaWEp1WlhSbGN6Q0NBU0l3RFFZSgpLb1pJaHZjTkFRRUJCUUFEZ2dFUEFEQ0NBUW9DZ2dFQkFLV0JVajltL2VnZDlpRmp4Zit3aTlQRFZvZXJsZ0plCjl2eHZvMVFRREJXNE5nT3NRWXkvbFR4OGtxd0hzbDdBQkR5SytUN1YzdGQ5VDg4V2ZVNmRZL0F3aStIUVJ5akUKMkt3U1dWQkRtdEMxLzdWTm9uYm5MOUpibWdwb21XRGNHNUovMEZsWHpwZkJPcXlleERjR2RCY0l4N0hqdFljeQpEWDZJTjJpaUhtQ0tjSFlqZHBEVjZEeTlKcVNCZEJmR2dlK1k5MzB3enJ5aEFlZjJqb1VxSXBMblVtUWhMVm1VCjJ0ZDJ0Uy9NY1NEcFpiOExJTlYvNndpT2JrdjVFRFRoT2pBMTlSQWpkVDVrRkp3TWZIM3BVMkozanliWExyUjMKMGVmdFc1N1dsZi92OUlVblRlWktxTFY4VG9pRitINndKeEF6bDFUemVpWVYybDd3c0lNblZxTUNBd0VBQWFOQwpNRUF3RGdZRFZSMFBBUUgvQkFRREFnRUdNQThHQTFVZEV3RUIvd1FGTUFNQkFmOHdIUVlEVlIwT0JCWUVGRlFPCnYwRnFJVldERHl1T0xaeFRZZmlMeTh5c01BMEdDU3FHU0liM0RRRUJDd1VBQTRJQkFRQmE4Mzg4YjZYVjNFZGMKMi9kd21hTkttYVYxWmo2ZGJMSHQwcUk2OUVUV0JKOWJxdVREeWg3SEJBY01vTHVic3g5bVNLbjRReUZ5NjZoYQpFYWN6S3Rrak01MjhyRDN4WXhXaWI1M2Z4eDRXWmlobmRpNjhHaUUyNjRWNkw3SC9SeC9SSU8wY3ZkSHFkNTI1CkFNMjZtYzR6NDRJYlYya2liWGJSNVIwbU9ZbGtMby9DUGJhTUtzY1hFTEVvenBVZjdlTUQzYnlPT2ZYcU9oVDEKQm42NUNPZTR2dGxmT0FQMjl1bmx4cS91Nm1rclRnbmF1ZU1IRWFUT2lEVU1mZ0MzUzdZQmtjK3Nsdlc3QlJodgovUVpwSnNldHJoRjJyOVVTZ1dHc3U5dXc3cmorOTlkR0FrT1RmWGhHWUNTaldRSE4wMzVMTHFXa0E3UUU1cGl0CjY4N29pRnpHCi0tLS0tRU5EIENFUlRJRklDQVRFLS0tLS0K
      url: https://10.23.132.51:5443/validate-v1-service
    rules:
      - apiGroups:
          - ""
        apiVersions:
          - v1
        operations:
          - CREATE
          - UPDATE
        resources:
          - services
    sideEffects: None