openbao-helm/templates
Christopher Swenson daa2b3b236
Set default object selector for webhooks to exclude injector itself (#736)
Set default object selector for webhooks to exclude injector itself

If `injector.failurePolicy` is set to `Fail`, there is a race condition
where if the mutating webhook config is setup before the injector, then
the injector can fail to start because it tries to inject itself.

We can work around this by ignoring the injector pod in in the webhook
by default.

Thanks to @joeyslalom for the object selector to exclude the pod.

Fixes https://github.com/hashicorp/vault-k8s/issues/258
2022-05-24 09:48:01 -07:00
..
tests Remove unncessary template calls (#712) 2022-04-12 22:54:54 -07:00
_helpers.tpl Set default object selector for webhooks to exclude injector itself (#736) 2022-05-24 09:48:01 -07:00
csi-clusterrole.yaml VAULT-571 Matching documented behavior and consul (#703) 2022-03-21 09:50:23 -07:00
csi-clusterrolebinding.yaml VAULT-571 Matching documented behavior and consul (#703) 2022-03-21 09:50:23 -07:00
csi-daemonset.yaml VAULT-571 Matching documented behavior and consul (#703) 2022-03-21 09:50:23 -07:00
csi-serviceaccount.yaml VAULT-571 Matching documented behavior and consul (#703) 2022-03-21 09:50:23 -07:00
injector-certs-secret.yaml VAULT-571 Matching documented behavior and consul (#703) 2022-03-21 09:50:23 -07:00
injector-clusterrole.yaml VAULT-571 Matching documented behavior and consul (#703) 2022-03-21 09:50:23 -07:00
injector-clusterrolebinding.yaml VAULT-571 Matching documented behavior and consul (#703) 2022-03-21 09:50:23 -07:00
injector-deployment.yaml Implement support for Topology Spread Constraints (#652) 2022-04-28 10:47:40 -07:00
injector-disruptionbudget.yaml Support policy/v1 disruptionbudget beyond kube 1.21 (#710) 2022-04-04 22:26:16 -07:00
injector-mutating-webhook.yaml Set default object selector for webhooks to exclude injector itself (#736) 2022-05-24 09:48:01 -07:00
injector-network-policy.yaml VAULT-571 Matching documented behavior and consul (#703) 2022-03-21 09:50:23 -07:00
injector-psp-role.yaml VAULT-571 Matching documented behavior and consul (#703) 2022-03-21 09:50:23 -07:00
injector-psp-rolebinding.yaml VAULT-571 Matching documented behavior and consul (#703) 2022-03-21 09:50:23 -07:00
injector-psp.yaml VAULT-571 Matching documented behavior and consul (#703) 2022-03-21 09:50:23 -07:00
injector-role.yaml VAULT-571 Matching documented behavior and consul (#703) 2022-03-21 09:50:23 -07:00
injector-rolebinding.yaml VAULT-571 Matching documented behavior and consul (#703) 2022-03-21 09:50:23 -07:00
injector-service.yaml VAULT-571 Matching documented behavior and consul (#703) 2022-03-21 09:50:23 -07:00
injector-serviceaccount.yaml VAULT-571 Matching documented behavior and consul (#703) 2022-03-21 09:50:23 -07:00
NOTES.txt Update notes template to be helm v3 compatible (#378) 2020-08-27 16:34:25 +01:00
server-clusterrolebinding.yaml Restore missing 'vault' service account (#737) 2022-05-24 08:27:17 -07:00
server-config-configmap.yaml Remove unncessary template calls (#712) 2022-04-12 22:54:54 -07:00
server-discovery-role.yaml Remove unncessary template calls (#712) 2022-04-12 22:54:54 -07:00
server-discovery-rolebinding.yaml Remove unncessary template calls (#712) 2022-04-12 22:54:54 -07:00
server-disruptionbudget.yaml Remove unncessary template calls (#712) 2022-04-12 22:54:54 -07:00
server-ha-active-service.yaml Remove unncessary template calls (#712) 2022-04-12 22:54:54 -07:00
server-ha-standby-service.yaml VAULT-571 Matching documented behavior and consul (#703) 2022-03-21 09:50:23 -07:00
server-headless-service.yaml VAULT-571 Matching documented behavior and consul (#703) 2022-03-21 09:50:23 -07:00
server-ingress.yaml VAULT-571 Matching documented behavior and consul (#703) 2022-03-21 09:50:23 -07:00
server-network-policy.yaml Allow configurable egress for server network policy (#389) 2020-12-16 12:30:24 -05:00
server-psp-role.yaml Remove unncessary template calls (#712) 2022-04-12 22:54:54 -07:00
server-psp-rolebinding.yaml Remove unncessary template calls (#712) 2022-04-12 22:54:54 -07:00
server-psp.yaml Remove unncessary template calls (#712) 2022-04-12 22:54:54 -07:00
server-route.yaml allow injection of TLS config for OpenShift routes (#686) 2022-01-19 22:37:26 -08:00
server-service.yaml VAULT-571 Matching documented behavior and consul (#703) 2022-03-21 09:50:23 -07:00
server-serviceaccount.yaml Restore missing 'vault' service account (#737) 2022-05-24 08:27:17 -07:00
server-statefulset.yaml Implement support for Topology Spread Constraints (#652) 2022-04-28 10:47:40 -07:00
ui-service.yaml VAULT-571 Matching documented behavior and consul (#703) 2022-03-21 09:50:23 -07:00