Fix with rbac #2

ytsaurus · Aug 30, 2024 · 2580781 · 2580781
1 parent a0b66d6
commit 2580781
Show file tree

Hide file tree

Showing 2 changed files with 23 additions and 0 deletions.
diff --git a/config/crd/patches/cainjection_in_remotedatanodes.yaml b/config/crd/patches/cainjection_in_remotedatanodes.yaml
@@ -0,0 +1,7 @@
+# The following patch adds a directive for certmanager to inject CA into the CRD
+apiVersion: apiextensions.k8s.io/v1
+kind: CustomResourceDefinition
+metadata:
+  annotations:
+    cert-manager.io/inject-ca-from: $(WEBHOOK_CERTIFICATE_NAMESPACE)/$(WEBHOOK_CERTIFICATE_NAME)
+  name: remotedatanodes.cluster.ytsaurus.tech
diff --git a/config/crd/patches/webhook_in_remotedatanodes.yaml b/config/crd/patches/webhook_in_remotedatanodes.yaml
@@ -0,0 +1,16 @@
+# The following patch enables a conversion webhook for the CRD
+apiVersion: apiextensions.k8s.io/v1
+kind: CustomResourceDefinition
+metadata:
+  name: remotedatanodes.cluster.ytsaurus.tech
+spec:
+  conversion:
+    strategy: Webhook
+    webhook:
+      clientConfig:
+        service:
+          namespace: system
+          name: webhook-service
+          path: /convert
+      conversionReviewVersions:
+      - v1