feat: add mutate webhook config create

Signed-off-by: peefy <[email protected]>
kcl-lang · Sep 4, 2024 · 32aec04 · 32aec04
1 parent 5042e5c
commit 32aec04
Show file tree

Hide file tree

Showing 4 changed files with 27 additions and 0 deletions.
diff --git a/cmd/webhook-init/main.go b/cmd/webhook-init/main.go
@@ -147,6 +147,8 @@ func WriteFile(filepath string, sCert *bytes.Buffer) error {
 	return nil
 }
 
+//+kubebuilder:rbac:groups=admissionregistration.k8s.io,resources=mutatingwebhookconfigurations,verbs=get;list;watch;create;update;patch;delete
+
 func createMutationConfig(caCert *bytes.Buffer) {
 	var (
 		webhookNamespace, _ = os.LookupEnv("WEBHOOK_NAMESPACE")

diff --git a/config/all.yaml b/config/all.yaml
@@ -71,6 +71,18 @@ kind: ClusterRole
 metadata:
   name: webhook-role
 rules:
+- apiGroups:
+  - admissionregistration.k8s.io
+  resources:
+  - mutatingwebhookconfigurations
+  verbs:
+  - create
+  - delete
+  - get
+  - list
+  - patch
+  - update
+  - watch
 - apiGroups:
   - krm.kcl.dev
   resources:

diff --git a/config/rbac/role.yaml b/config/rbac/role.yaml
@@ -4,6 +4,18 @@ kind: ClusterRole
 metadata:
   name: webhook-role
 rules:
+- apiGroups:
+  - admissionregistration.k8s.io
+  resources:
+  - mutatingwebhookconfigurations
+  verbs:
+  - create
+  - delete
+  - get
+  - list
+  - patch
+  - update
+  - watch
 - apiGroups:
   - krm.kcl.dev
   resources:

diff --git a/pkg/webhook/handler/mutation.go b/pkg/webhook/handler/mutation.go
@@ -22,6 +22,7 @@ import (
 //+kubebuilder:rbac:groups=krm.kcl.dev,resources=kclruns,verbs=get;list;watch;create;update;patch;delete
 //+kubebuilder:rbac:groups=krm.kcl.dev,resources=kclruns/status,verbs=get;update;patch
 //+kubebuilder:rbac:groups=krm.kcl.dev,resources=kclruns/finalizers,verbs=update
+//+kubebuilder:rbac:groups=admissionregistration.k8s.io,resources=mutatingwebhookconfigurations,verbs=get;list;watch;create;update;patch;delete
 
 // MutationHandler validates Kubernetes resources using the KCL source.
 type MutationHandler struct {