config-kapp.yaml

# Copyright 2020 VMware, Inc.
# SPDX-License-Identifier: Apache-2.0

apiVersion: v1
kind: ConfigMap
metadata:
  name: config-kapp
  namespace: service-bindings
  labels:
    bindings.labs.vmware.com/release: devel
    kapp.k14s.io/config: ""
data:
  config.yml: |
    apiVersion: kapp.k14s.io/v1alpha1
    kind: Config
    minimumRequiredVersion: 0.34.0
    rebaseRules:
    - path: [rules]
      type: copy
      sources: [existing]
      resourceMatchers:
      - andMatcher:
          matchers:
          - apiVersionKindMatcher: {apiVersion: rbac.authorization.k8s.io/v1, kind: ClusterRole}
          - kindNamespaceNameMatcher: {kind: ClusterRole, name: service-binding-admin}
    - path: [data]
      type: copy
      sources: [existing]
      resourceMatchers:
      - andMatcher:
          matchers:
          - apiVersionKindMatcher: {apiVersion: v1, kind: Secret}
          - kindNamespaceNameMatcher: {kind: Secret, namespace: service-bindings, name: webhook-certs}
    - paths:
      - [webhooks, {allIndexes: true}, clientConfig, caBundle]
      - [webhooks, {allIndexes: true}, clientConfig, service, path]
      - [webhooks, {allIndexes: true}, clientConfig, service, port]
      - [webhooks, {allIndexes: true}, matchPolicy]
      - [webhooks, {allIndexes: true}, namespaceSelector]
      - [webhooks, {allIndexes: true}, objectSelector]
      - [webhooks, {allIndexes: true}, reinvocationPolicy]
      - [webhooks, {allIndexes: true}, rules]
      - [webhooks, {allIndexes: true}, sideEffects]
      - [webhooks, {allIndexes: true}, timeoutSeconds]
      type: copy
      sources: [existing]
      resourceMatchers:
      - apiVersionKindMatcher: {apiVersion: admissionregistration.k8s.io/v1, kind: MutatingWebhookConfiguration}
      - apiVersionKindMatcher: {apiVersion: admissionregistration.k8s.io/v1, kind: ValidatingWebhookConfiguration}