helm/korifi/statefulset-runner/manifests.yaml
---
apiVersion: admissionregistration.k8s.io/v1
kind: MutatingWebhookConfiguration
metadata:
name: korifi-statefulset-runner-mutating-webhook-configuration
annotations:
cert-manager.io/inject-ca-from: '{{ .Release.Namespace }}/korifi-controllers-serving-cert'
webhooks:
- admissionReviewVersions:
- v1
clientConfig:
service:
name: korifi-controllers-webhook-service
namespace: '{{ .Release.Namespace }}'
path: /mutate--v1-pod
failurePolicy: Fail
name: mstspod.korifi.cloudfoundry.org
rules:
- apiGroups:
- ""
apiVersions:
- v1
operations:
- CREATE
resources:
- pods
sideEffects: None
objectSelector:
matchLabels:
korifi.cloudfoundry.org/add-stsr-index: "true"