diff --git a/app/kumactl/cmd/install/testdata/install-control-plane.cni-enabled.golden.yaml b/app/kumactl/cmd/install/testdata/install-control-plane.cni-enabled.golden.yaml index 373583f2d650..196bf50902a5 100644 --- a/app/kumactl/cmd/install/testdata/install-control-plane.cni-enabled.golden.yaml +++ b/app/kumactl/cmd/install/testdata/install-control-plane.cni-enabled.golden.yaml @@ -565,7 +565,7 @@ spec: metadata: annotations: checksum/config: fd9d1d8386f97f2bd49e50f476520816168a1c9f60bbc43dec1347a64d239155 - checksum/tls-secrets: ec0bc0b5613dc75c86fb3dc148f404db4eaec3e3817ee4eba2a70fd1bc535999 + checksum/tls-secrets: ef229d2d8e83f89fc76345a85158c87105b2b3553cbfbba83b25dce66479a6e3 labels: app: kuma-control-plane app.kubernetes.io/name: kuma @@ -864,30 +864,6 @@ webhooks: resources: - pods sideEffects: None - - name: kuma-injector.kuma.io - admissionReviewVersions: ["v1"] - failurePolicy: Ignore - namespaceSelector: - matchExpressions: - - key: kubernetes.io/metadata.name - operator: NotIn - values: ["kube-system"] - clientConfig: - caBundle: XYZ - service: - namespace: kuma-system - name: kuma-control-plane - path: /inject-sidecar - rules: - - apiGroups: - - "" - apiVersions: - - v1 - operations: - - CREATE - resources: - - pods - sideEffects: None --- apiVersion: admissionregistration.k8s.io/v1 kind: ValidatingWebhookConfiguration diff --git a/app/kumactl/cmd/install/testdata/install-control-plane.defaults.golden.yaml b/app/kumactl/cmd/install/testdata/install-control-plane.defaults.golden.yaml index e4d1d049a098..7ed4313f2ea2 100644 --- a/app/kumactl/cmd/install/testdata/install-control-plane.defaults.golden.yaml +++ b/app/kumactl/cmd/install/testdata/install-control-plane.defaults.golden.yaml @@ -6503,7 +6503,7 @@ spec: metadata: annotations: checksum/config: fd9d1d8386f97f2bd49e50f476520816168a1c9f60bbc43dec1347a64d239155 - checksum/tls-secrets: ec0bc0b5613dc75c86fb3dc148f404db4eaec3e3817ee4eba2a70fd1bc535999 + checksum/tls-secrets: ef229d2d8e83f89fc76345a85158c87105b2b3553cbfbba83b25dce66479a6e3 labels: app: kuma-control-plane app.kubernetes.io/name: kuma @@ -6798,30 +6798,6 @@ webhooks: resources: - pods sideEffects: None - - name: kuma-injector.kuma.io - admissionReviewVersions: ["v1"] - failurePolicy: Ignore - namespaceSelector: - matchExpressions: - - key: kubernetes.io/metadata.name - operator: NotIn - values: ["kube-system"] - clientConfig: - caBundle: XYZ - service: - namespace: kuma-system - name: kuma-control-plane - path: /inject-sidecar - rules: - - apiGroups: - - "" - apiVersions: - - v1 - operations: - - CREATE - resources: - - pods - sideEffects: None --- apiVersion: admissionregistration.k8s.io/v1 kind: ValidatingWebhookConfiguration diff --git a/app/kumactl/cmd/install/testdata/install-control-plane.gateway-api-present-not-enabled.yaml b/app/kumactl/cmd/install/testdata/install-control-plane.gateway-api-present-not-enabled.yaml index e4d1d049a098..7ed4313f2ea2 100644 --- a/app/kumactl/cmd/install/testdata/install-control-plane.gateway-api-present-not-enabled.yaml +++ b/app/kumactl/cmd/install/testdata/install-control-plane.gateway-api-present-not-enabled.yaml @@ -6503,7 +6503,7 @@ spec: metadata: annotations: checksum/config: fd9d1d8386f97f2bd49e50f476520816168a1c9f60bbc43dec1347a64d239155 - checksum/tls-secrets: ec0bc0b5613dc75c86fb3dc148f404db4eaec3e3817ee4eba2a70fd1bc535999 + checksum/tls-secrets: ef229d2d8e83f89fc76345a85158c87105b2b3553cbfbba83b25dce66479a6e3 labels: app: kuma-control-plane app.kubernetes.io/name: kuma @@ -6798,30 +6798,6 @@ webhooks: resources: - pods sideEffects: None - - name: kuma-injector.kuma.io - admissionReviewVersions: ["v1"] - failurePolicy: Ignore - namespaceSelector: - matchExpressions: - - key: kubernetes.io/metadata.name - operator: NotIn - values: ["kube-system"] - clientConfig: - caBundle: XYZ - service: - namespace: kuma-system - name: kuma-control-plane - path: /inject-sidecar - rules: - - apiGroups: - - "" - apiVersions: - - v1 - operations: - - CREATE - resources: - - pods - sideEffects: None --- apiVersion: admissionregistration.k8s.io/v1 kind: ValidatingWebhookConfiguration diff --git a/app/kumactl/cmd/install/testdata/install-control-plane.gateway-api-present.yaml b/app/kumactl/cmd/install/testdata/install-control-plane.gateway-api-present.yaml index 3a7eac94cf9e..20bf925bd1eb 100644 --- a/app/kumactl/cmd/install/testdata/install-control-plane.gateway-api-present.yaml +++ b/app/kumactl/cmd/install/testdata/install-control-plane.gateway-api-present.yaml @@ -6709,7 +6709,7 @@ spec: metadata: annotations: checksum/config: fd9d1d8386f97f2bd49e50f476520816168a1c9f60bbc43dec1347a64d239155 - checksum/tls-secrets: ec0bc0b5613dc75c86fb3dc148f404db4eaec3e3817ee4eba2a70fd1bc535999 + checksum/tls-secrets: ef229d2d8e83f89fc76345a85158c87105b2b3553cbfbba83b25dce66479a6e3 labels: app: kuma-control-plane app.kubernetes.io/name: kuma @@ -7013,30 +7013,6 @@ webhooks: resources: - pods sideEffects: None - - name: kuma-injector.kuma.io - admissionReviewVersions: ["v1"] - failurePolicy: Ignore - namespaceSelector: - matchExpressions: - - key: kubernetes.io/metadata.name - operator: NotIn - values: ["kube-system"] - clientConfig: - caBundle: XYZ - service: - namespace: kuma-system - name: kuma-control-plane - path: /inject-sidecar - rules: - - apiGroups: - - "" - apiVersions: - - v1 - operations: - - CREATE - resources: - - pods - sideEffects: None --- apiVersion: admissionregistration.k8s.io/v1 kind: ValidatingWebhookConfiguration diff --git a/app/kumactl/cmd/install/testdata/install-control-plane.override-env-vars.golden.yaml b/app/kumactl/cmd/install/testdata/install-control-plane.override-env-vars.golden.yaml index 10c792c7c088..80f439faf72e 100644 --- a/app/kumactl/cmd/install/testdata/install-control-plane.override-env-vars.golden.yaml +++ b/app/kumactl/cmd/install/testdata/install-control-plane.override-env-vars.golden.yaml @@ -351,7 +351,7 @@ spec: metadata: annotations: checksum/config: fd9d1d8386f97f2bd49e50f476520816168a1c9f60bbc43dec1347a64d239155 - checksum/tls-secrets: ec0bc0b5613dc75c86fb3dc148f404db4eaec3e3817ee4eba2a70fd1bc535999 + checksum/tls-secrets: ef229d2d8e83f89fc76345a85158c87105b2b3553cbfbba83b25dce66479a6e3 labels: app: kuma-control-plane app.kubernetes.io/name: kuma @@ -646,30 +646,6 @@ webhooks: resources: - pods sideEffects: None - - name: kuma-injector.kuma.io - admissionReviewVersions: ["v1"] - failurePolicy: Ignore - namespaceSelector: - matchExpressions: - - key: kubernetes.io/metadata.name - operator: NotIn - values: ["kube-system"] - clientConfig: - caBundle: XYZ - service: - namespace: kuma-system - name: kuma-control-plane - path: /inject-sidecar - rules: - - apiGroups: - - "" - apiVersions: - - v1 - operations: - - CREATE - resources: - - pods - sideEffects: None --- apiVersion: admissionregistration.k8s.io/v1 kind: ValidatingWebhookConfiguration diff --git a/app/kumactl/cmd/install/testdata/install-control-plane.overrides.golden.yaml b/app/kumactl/cmd/install/testdata/install-control-plane.overrides.golden.yaml index c8499d377351..3b8b8d158228 100644 --- a/app/kumactl/cmd/install/testdata/install-control-plane.overrides.golden.yaml +++ b/app/kumactl/cmd/install/testdata/install-control-plane.overrides.golden.yaml @@ -353,7 +353,7 @@ spec: metadata: annotations: checksum/config: 154c47a95fc93687dd1e825cea7f843d0fe8c450f82014d27cd7eb1a49f3bd35 - checksum/tls-secrets: 74d9573a31dfa8171397dc0692e08ce3032ed6976cd073b893b51a2289a09338 + checksum/tls-secrets: 3aeba87ff12b47b7074c452407f925cdbc3e2edc608b2592efa1081ac26dc7dd labels: app: kuma-control-plane app.kubernetes.io/name: kuma @@ -683,30 +683,6 @@ webhooks: resources: - pods sideEffects: None - - name: kuma-injector.kuma.io - admissionReviewVersions: ["v1"] - failurePolicy: Ignore - namespaceSelector: - matchExpressions: - - key: kubernetes.io/metadata.name - operator: NotIn - values: ["kube-system"] - clientConfig: - caBundle: XYZ - service: - namespace: kuma - name: kuma-ctrl-plane - path: /inject-sidecar - rules: - - apiGroups: - - "" - apiVersions: - - v1 - operations: - - CREATE - resources: - - pods - sideEffects: None --- apiVersion: admissionregistration.k8s.io/v1 kind: ValidatingWebhookConfiguration diff --git a/app/kumactl/cmd/install/testdata/install-control-plane.registry.golden.yaml b/app/kumactl/cmd/install/testdata/install-control-plane.registry.golden.yaml index 51aca2751012..fe484325d222 100644 --- a/app/kumactl/cmd/install/testdata/install-control-plane.registry.golden.yaml +++ b/app/kumactl/cmd/install/testdata/install-control-plane.registry.golden.yaml @@ -351,7 +351,7 @@ spec: metadata: annotations: checksum/config: fd9d1d8386f97f2bd49e50f476520816168a1c9f60bbc43dec1347a64d239155 - checksum/tls-secrets: ec0bc0b5613dc75c86fb3dc148f404db4eaec3e3817ee4eba2a70fd1bc535999 + checksum/tls-secrets: ef229d2d8e83f89fc76345a85158c87105b2b3553cbfbba83b25dce66479a6e3 labels: app: kuma-control-plane app.kubernetes.io/name: kuma @@ -646,30 +646,6 @@ webhooks: resources: - pods sideEffects: None - - name: kuma-injector.kuma.io - admissionReviewVersions: ["v1"] - failurePolicy: Ignore - namespaceSelector: - matchExpressions: - - key: kubernetes.io/metadata.name - operator: NotIn - values: ["kube-system"] - clientConfig: - caBundle: XYZ - service: - namespace: kuma-system - name: kuma-control-plane - path: /inject-sidecar - rules: - - apiGroups: - - "" - apiVersions: - - v1 - operations: - - CREATE - resources: - - pods - sideEffects: None --- apiVersion: admissionregistration.k8s.io/v1 kind: ValidatingWebhookConfiguration diff --git a/app/kumactl/cmd/install/testdata/install-control-plane.tproxy-ebpf-experimental-enabled.golden.yaml b/app/kumactl/cmd/install/testdata/install-control-plane.tproxy-ebpf-experimental-enabled.golden.yaml index b2ed899016bc..56d9da66bebd 100644 --- a/app/kumactl/cmd/install/testdata/install-control-plane.tproxy-ebpf-experimental-enabled.golden.yaml +++ b/app/kumactl/cmd/install/testdata/install-control-plane.tproxy-ebpf-experimental-enabled.golden.yaml @@ -351,7 +351,7 @@ spec: metadata: annotations: checksum/config: fd9d1d8386f97f2bd49e50f476520816168a1c9f60bbc43dec1347a64d239155 - checksum/tls-secrets: ec0bc0b5613dc75c86fb3dc148f404db4eaec3e3817ee4eba2a70fd1bc535999 + checksum/tls-secrets: ef229d2d8e83f89fc76345a85158c87105b2b3553cbfbba83b25dce66479a6e3 labels: app: kuma-control-plane app.kubernetes.io/name: kuma @@ -656,30 +656,6 @@ webhooks: resources: - pods sideEffects: None - - name: kuma-injector.kuma.io - admissionReviewVersions: ["v1"] - failurePolicy: Ignore - namespaceSelector: - matchExpressions: - - key: kubernetes.io/metadata.name - operator: NotIn - values: ["kube-system"] - clientConfig: - caBundle: XYZ - service: - namespace: kuma-system - name: kuma-control-plane - path: /inject-sidecar - rules: - - apiGroups: - - "" - apiVersions: - - v1 - operations: - - CREATE - resources: - - pods - sideEffects: None --- apiVersion: admissionregistration.k8s.io/v1 kind: ValidatingWebhookConfiguration diff --git a/app/kumactl/cmd/install/testdata/install-control-plane.with-egress.golden.yaml b/app/kumactl/cmd/install/testdata/install-control-plane.with-egress.golden.yaml index ebf78cac59e5..d24c5abe91c2 100644 --- a/app/kumactl/cmd/install/testdata/install-control-plane.with-egress.golden.yaml +++ b/app/kumactl/cmd/install/testdata/install-control-plane.with-egress.golden.yaml @@ -382,7 +382,7 @@ spec: metadata: annotations: checksum/config: fd9d1d8386f97f2bd49e50f476520816168a1c9f60bbc43dec1347a64d239155 - checksum/tls-secrets: ec0bc0b5613dc75c86fb3dc148f404db4eaec3e3817ee4eba2a70fd1bc535999 + checksum/tls-secrets: ef229d2d8e83f89fc76345a85158c87105b2b3553cbfbba83b25dce66479a6e3 labels: app: kuma-control-plane app.kubernetes.io/name: kuma @@ -806,30 +806,6 @@ webhooks: resources: - pods sideEffects: None - - name: kuma-injector.kuma.io - admissionReviewVersions: ["v1"] - failurePolicy: Ignore - namespaceSelector: - matchExpressions: - - key: kubernetes.io/metadata.name - operator: NotIn - values: ["kube-system"] - clientConfig: - caBundle: XYZ - service: - namespace: kuma-system - name: kuma-control-plane - path: /inject-sidecar - rules: - - apiGroups: - - "" - apiVersions: - - v1 - operations: - - CREATE - resources: - - pods - sideEffects: None --- apiVersion: admissionregistration.k8s.io/v1 kind: ValidatingWebhookConfiguration diff --git a/app/kumactl/cmd/install/testdata/install-control-plane.with-helm-set.yaml b/app/kumactl/cmd/install/testdata/install-control-plane.with-helm-set.yaml index aacaf4bacf7b..d3ba876dbeb0 100644 --- a/app/kumactl/cmd/install/testdata/install-control-plane.with-helm-set.yaml +++ b/app/kumactl/cmd/install/testdata/install-control-plane.with-helm-set.yaml @@ -6565,7 +6565,7 @@ spec: metadata: annotations: checksum/config: fd9d1d8386f97f2bd49e50f476520816168a1c9f60bbc43dec1347a64d239155 - checksum/tls-secrets: ec0bc0b5613dc75c86fb3dc148f404db4eaec3e3817ee4eba2a70fd1bc535999 + checksum/tls-secrets: ef229d2d8e83f89fc76345a85158c87105b2b3553cbfbba83b25dce66479a6e3 labels: app: kuma-control-plane app.kubernetes.io/name: kuma @@ -7124,30 +7124,6 @@ webhooks: resources: - pods sideEffects: None - - name: kuma-injector.kuma.io - admissionReviewVersions: ["v1"] - failurePolicy: Ignore - namespaceSelector: - matchExpressions: - - key: kubernetes.io/metadata.name - operator: NotIn - values: ["kube-system"] - clientConfig: - caBundle: XYZ - service: - namespace: kuma-system - name: kuma-control-plane - path: /inject-sidecar - rules: - - apiGroups: - - "" - apiVersions: - - v1 - operations: - - CREATE - resources: - - pods - sideEffects: None --- apiVersion: admissionregistration.k8s.io/v1 kind: ValidatingWebhookConfiguration diff --git a/app/kumactl/cmd/install/testdata/install-control-plane.with-helm-values.yaml b/app/kumactl/cmd/install/testdata/install-control-plane.with-helm-values.yaml index 0733322a5546..9945f1ec7a4a 100644 --- a/app/kumactl/cmd/install/testdata/install-control-plane.with-helm-values.yaml +++ b/app/kumactl/cmd/install/testdata/install-control-plane.with-helm-values.yaml @@ -351,7 +351,7 @@ spec: metadata: annotations: checksum/config: fd9d1d8386f97f2bd49e50f476520816168a1c9f60bbc43dec1347a64d239155 - checksum/tls-secrets: ec0bc0b5613dc75c86fb3dc148f404db4eaec3e3817ee4eba2a70fd1bc535999 + checksum/tls-secrets: ef229d2d8e83f89fc76345a85158c87105b2b3553cbfbba83b25dce66479a6e3 labels: app: kuma-control-plane app.kubernetes.io/name: kuma @@ -646,30 +646,6 @@ webhooks: resources: - pods sideEffects: None - - name: kuma-injector.kuma.io - admissionReviewVersions: ["v1"] - failurePolicy: Ignore - namespaceSelector: - matchExpressions: - - key: kubernetes.io/metadata.name - operator: NotIn - values: ["kube-system"] - clientConfig: - caBundle: XYZ - service: - namespace: kuma-system - name: kuma-control-plane - path: /inject-sidecar - rules: - - apiGroups: - - "" - apiVersions: - - v1 - operations: - - CREATE - resources: - - pods - sideEffects: None --- apiVersion: admissionregistration.k8s.io/v1 kind: ValidatingWebhookConfiguration diff --git a/app/kumactl/cmd/install/testdata/install-control-plane.with-ingress.golden.yaml b/app/kumactl/cmd/install/testdata/install-control-plane.with-ingress.golden.yaml index 14e6172a23de..b28de62ca8e0 100644 --- a/app/kumactl/cmd/install/testdata/install-control-plane.with-ingress.golden.yaml +++ b/app/kumactl/cmd/install/testdata/install-control-plane.with-ingress.golden.yaml @@ -382,7 +382,7 @@ spec: metadata: annotations: checksum/config: fd9d1d8386f97f2bd49e50f476520816168a1c9f60bbc43dec1347a64d239155 - checksum/tls-secrets: ec0bc0b5613dc75c86fb3dc148f404db4eaec3e3817ee4eba2a70fd1bc535999 + checksum/tls-secrets: ef229d2d8e83f89fc76345a85158c87105b2b3553cbfbba83b25dce66479a6e3 labels: app: kuma-control-plane app.kubernetes.io/name: kuma @@ -812,30 +812,6 @@ webhooks: resources: - pods sideEffects: None - - name: kuma-injector.kuma.io - admissionReviewVersions: ["v1"] - failurePolicy: Ignore - namespaceSelector: - matchExpressions: - - key: kubernetes.io/metadata.name - operator: NotIn - values: ["kube-system"] - clientConfig: - caBundle: XYZ - service: - namespace: kuma-system - name: kuma-control-plane - path: /inject-sidecar - rules: - - apiGroups: - - "" - apiVersions: - - v1 - operations: - - CREATE - resources: - - pods - sideEffects: None --- apiVersion: admissionregistration.k8s.io/v1 kind: ValidatingWebhookConfiguration diff --git a/app/kumactl/cmd/install/testdata/install-control-plane.zone.golden.yaml b/app/kumactl/cmd/install/testdata/install-control-plane.zone.golden.yaml index 9b599087bdfe..343dbbc62d21 100644 --- a/app/kumactl/cmd/install/testdata/install-control-plane.zone.golden.yaml +++ b/app/kumactl/cmd/install/testdata/install-control-plane.zone.golden.yaml @@ -351,7 +351,7 @@ spec: metadata: annotations: checksum/config: fd9d1d8386f97f2bd49e50f476520816168a1c9f60bbc43dec1347a64d239155 - checksum/tls-secrets: ec0bc0b5613dc75c86fb3dc148f404db4eaec3e3817ee4eba2a70fd1bc535999 + checksum/tls-secrets: ef229d2d8e83f89fc76345a85158c87105b2b3553cbfbba83b25dce66479a6e3 labels: app: kuma-control-plane app.kubernetes.io/name: kuma @@ -650,30 +650,6 @@ webhooks: resources: - pods sideEffects: None - - name: kuma-injector.kuma.io - admissionReviewVersions: ["v1"] - failurePolicy: Ignore - namespaceSelector: - matchExpressions: - - key: kubernetes.io/metadata.name - operator: NotIn - values: ["kube-system"] - clientConfig: - caBundle: XYZ - service: - namespace: kuma-system - name: kuma-control-plane - path: /inject-sidecar - rules: - - apiGroups: - - "" - apiVersions: - - v1 - operations: - - CREATE - resources: - - pods - sideEffects: None --- apiVersion: admissionregistration.k8s.io/v1 kind: ValidatingWebhookConfiguration diff --git a/app/kumactl/cmd/install/testdata/install-cp-helm/doNotChangeTlsChecksum.golden.yaml b/app/kumactl/cmd/install/testdata/install-cp-helm/doNotChangeTlsChecksum.golden.yaml index 02cf45daaa6c..0e85ba96d2bc 100644 --- a/app/kumactl/cmd/install/testdata/install-cp-helm/doNotChangeTlsChecksum.golden.yaml +++ b/app/kumactl/cmd/install/testdata/install-cp-helm/doNotChangeTlsChecksum.golden.yaml @@ -645,30 +645,6 @@ webhooks: resources: - pods sideEffects: None - - name: kuma-injector.kuma.io - admissionReviewVersions: ["v1"] - failurePolicy: Ignore - namespaceSelector: - matchExpressions: - - key: kubernetes.io/metadata.name - operator: NotIn - values: ["kube-system"] - clientConfig: - caBundle: XYZ - service: - namespace: kuma-system - name: kuma-control-plane - path: /inject-sidecar - rules: - - apiGroups: - - "" - apiVersions: - - v1 - operations: - - CREATE - resources: - - pods - sideEffects: None --- apiVersion: admissionregistration.k8s.io/v1 kind: ValidatingWebhookConfiguration diff --git a/app/kumactl/cmd/install/testdata/install-cp-helm/empty.golden.yaml b/app/kumactl/cmd/install/testdata/install-cp-helm/empty.golden.yaml index 2f2309a05c42..031fe24a1135 100644 --- a/app/kumactl/cmd/install/testdata/install-cp-helm/empty.golden.yaml +++ b/app/kumactl/cmd/install/testdata/install-cp-helm/empty.golden.yaml @@ -351,7 +351,7 @@ spec: metadata: annotations: checksum/config: fd9d1d8386f97f2bd49e50f476520816168a1c9f60bbc43dec1347a64d239155 - checksum/tls-secrets: ec0bc0b5613dc75c86fb3dc148f404db4eaec3e3817ee4eba2a70fd1bc535999 + checksum/tls-secrets: ef229d2d8e83f89fc76345a85158c87105b2b3553cbfbba83b25dce66479a6e3 labels: app: kuma-control-plane app.kubernetes.io/name: kuma @@ -646,30 +646,6 @@ webhooks: resources: - pods sideEffects: None - - name: kuma-injector.kuma.io - admissionReviewVersions: ["v1"] - failurePolicy: Ignore - namespaceSelector: - matchExpressions: - - key: kubernetes.io/metadata.name - operator: NotIn - values: ["kube-system"] - clientConfig: - caBundle: XYZ - service: - namespace: kuma-system - name: kuma-control-plane - path: /inject-sidecar - rules: - - apiGroups: - - "" - apiVersions: - - v1 - operations: - - CREATE - resources: - - pods - sideEffects: None --- apiVersion: admissionregistration.k8s.io/v1 kind: ValidatingWebhookConfiguration diff --git a/app/kumactl/cmd/install/testdata/install-cp-helm/fix4485.golden.yaml b/app/kumactl/cmd/install/testdata/install-cp-helm/fix4485.golden.yaml index 40fb7ee7eae5..fe79633b0eb1 100644 --- a/app/kumactl/cmd/install/testdata/install-cp-helm/fix4485.golden.yaml +++ b/app/kumactl/cmd/install/testdata/install-cp-helm/fix4485.golden.yaml @@ -373,7 +373,7 @@ spec: metadata: annotations: checksum/config: 3a137bbfcbbe6ba5a3997b30b1b047b2b080a9f912520a5fa683f11c4c6b6f3c - checksum/tls-secrets: 0aa16161b78299954cdd990017f8466194fb21f0ce2655a6e0593b7effb20760 + checksum/tls-secrets: e68055a5f807d40c227179eff2841dea4ad0c3bc8f61799374ae1517d9d29490 labels: app: kuma-control-plane "foo": "baz" @@ -676,30 +676,6 @@ webhooks: resources: - pods sideEffects: None - - name: kuma-injector.kuma.io - admissionReviewVersions: ["v1"] - failurePolicy: Ignore - namespaceSelector: - matchExpressions: - - key: kubernetes.io/metadata.name - operator: NotIn - values: ["kube-system"] - clientConfig: - caBundle: XYZ - service: - namespace: kuma-system - name: kuma-control-plane - path: /inject-sidecar - rules: - - apiGroups: - - "" - apiVersions: - - v1 - operations: - - CREATE - resources: - - pods - sideEffects: None --- apiVersion: admissionregistration.k8s.io/v1 kind: ValidatingWebhookConfiguration diff --git a/app/kumactl/cmd/install/testdata/install-cp-helm/fix4496.golden.yaml b/app/kumactl/cmd/install/testdata/install-cp-helm/fix4496.golden.yaml index 469b6d998680..9f8088c33d2b 100644 --- a/app/kumactl/cmd/install/testdata/install-cp-helm/fix4496.golden.yaml +++ b/app/kumactl/cmd/install/testdata/install-cp-helm/fix4496.golden.yaml @@ -392,7 +392,7 @@ spec: metadata: annotations: checksum/config: 2f553eadd8f68661f4b1fd0b3ccbbc562943d89fa76f2f2ba2975541290fda71 - checksum/tls-secrets: 898408447c01709a9e7cb02e9250f64d1c84589507dc58042520d76cfa8a9c34 + checksum/tls-secrets: 3b3d8ecf760b979e540444ea6101495dd56d5228620a8604dcac2f6a12764231 labels: app: kuma-control-plane "foo": "bar" @@ -850,30 +850,6 @@ webhooks: resources: - pods sideEffects: None - - name: kuma-injector.kuma.io - admissionReviewVersions: ["v1"] - failurePolicy: Ignore - namespaceSelector: - matchExpressions: - - key: kubernetes.io/metadata.name - operator: NotIn - values: ["kube-system"] - clientConfig: - caBundle: XYZ - service: - namespace: kuma-system - name: kuma-control-plane - path: /inject-sidecar - rules: - - apiGroups: - - "" - apiVersions: - - v1 - operations: - - CREATE - resources: - - pods - sideEffects: None --- apiVersion: admissionregistration.k8s.io/v1 kind: ValidatingWebhookConfiguration diff --git a/app/kumactl/cmd/install/testdata/install-cp-helm/fix4935.golden.yaml b/app/kumactl/cmd/install/testdata/install-cp-helm/fix4935.golden.yaml index 7819f9d3dc11..9988bed01f62 100644 --- a/app/kumactl/cmd/install/testdata/install-cp-helm/fix4935.golden.yaml +++ b/app/kumactl/cmd/install/testdata/install-cp-helm/fix4935.golden.yaml @@ -635,7 +635,7 @@ spec: metadata: annotations: checksum/config: fd9d1d8386f97f2bd49e50f476520816168a1c9f60bbc43dec1347a64d239155 - checksum/tls-secrets: ec0bc0b5613dc75c86fb3dc148f404db4eaec3e3817ee4eba2a70fd1bc535999 + checksum/tls-secrets: ef229d2d8e83f89fc76345a85158c87105b2b3553cbfbba83b25dce66479a6e3 bim: "bam" foo: "{\"bar\": \"baz\"}" labels: @@ -1232,30 +1232,6 @@ webhooks: resources: - pods sideEffects: None - - name: kuma-injector.kuma.io - admissionReviewVersions: ["v1"] - failurePolicy: Ignore - namespaceSelector: - matchExpressions: - - key: kubernetes.io/metadata.name - operator: NotIn - values: ["kube-system"] - clientConfig: - caBundle: XYZ - service: - namespace: kuma-system - name: kuma-control-plane - path: /inject-sidecar - rules: - - apiGroups: - - "" - apiVersions: - - v1 - operations: - - CREATE - resources: - - pods - sideEffects: None --- apiVersion: admissionregistration.k8s.io/v1 kind: ValidatingWebhookConfiguration diff --git a/app/kumactl/cmd/install/testdata/install-cp-helm/fix5978.golden.yaml b/app/kumactl/cmd/install/testdata/install-cp-helm/fix5978.golden.yaml index fec54090539d..3b6ec70d465b 100644 --- a/app/kumactl/cmd/install/testdata/install-cp-helm/fix5978.golden.yaml +++ b/app/kumactl/cmd/install/testdata/install-cp-helm/fix5978.golden.yaml @@ -413,7 +413,7 @@ spec: metadata: annotations: checksum/config: fd9d1d8386f97f2bd49e50f476520816168a1c9f60bbc43dec1347a64d239155 - checksum/tls-secrets: ec0bc0b5613dc75c86fb3dc148f404db4eaec3e3817ee4eba2a70fd1bc535999 + checksum/tls-secrets: ef229d2d8e83f89fc76345a85158c87105b2b3553cbfbba83b25dce66479a6e3 labels: app: kuma-control-plane app.kubernetes.io/name: kuma @@ -975,30 +975,6 @@ webhooks: resources: - pods sideEffects: None - - name: kuma-injector.kuma.io - admissionReviewVersions: ["v1"] - failurePolicy: Ignore - namespaceSelector: - matchExpressions: - - key: kubernetes.io/metadata.name - operator: NotIn - values: ["kube-system"] - clientConfig: - caBundle: XYZ - service: - namespace: kuma-system - name: kuma-control-plane - path: /inject-sidecar - rules: - - apiGroups: - - "" - apiVersions: - - v1 - operations: - - CREATE - resources: - - pods - sideEffects: None --- apiVersion: admissionregistration.k8s.io/v1 kind: ValidatingWebhookConfiguration diff --git a/app/kumactl/cmd/install/testdata/install-cp-helm/fix7724.golden.yaml b/app/kumactl/cmd/install/testdata/install-cp-helm/fix7724.golden.yaml index 94a03d3e4f16..57e2b480b7bd 100644 --- a/app/kumactl/cmd/install/testdata/install-cp-helm/fix7724.golden.yaml +++ b/app/kumactl/cmd/install/testdata/install-cp-helm/fix7724.golden.yaml @@ -354,7 +354,7 @@ spec: metadata: annotations: checksum/config: fd9d1d8386f97f2bd49e50f476520816168a1c9f60bbc43dec1347a64d239155 - checksum/tls-secrets: ec0bc0b5613dc75c86fb3dc148f404db4eaec3e3817ee4eba2a70fd1bc535999 + checksum/tls-secrets: ef229d2d8e83f89fc76345a85158c87105b2b3553cbfbba83b25dce66479a6e3 labels: app: kuma-control-plane app.kubernetes.io/name: kuma @@ -649,30 +649,6 @@ webhooks: resources: - pods sideEffects: None - - name: kuma-injector.kuma.io - admissionReviewVersions: ["v1"] - failurePolicy: Ignore - namespaceSelector: - matchExpressions: - - key: kubernetes.io/metadata.name - operator: NotIn - values: ["kube-system"] - clientConfig: - caBundle: XYZ - service: - namespace: kuma-system - name: kuma-control-plane - path: /inject-sidecar - rules: - - apiGroups: - - "" - apiVersions: - - v1 - operations: - - CREATE - resources: - - pods - sideEffects: None --- apiVersion: admissionregistration.k8s.io/v1 kind: ValidatingWebhookConfiguration diff --git a/app/kumactl/cmd/install/testdata/install-cp-helm/fix7824.golden.yaml b/app/kumactl/cmd/install/testdata/install-cp-helm/fix7824.golden.yaml index 21cba3af2586..3eee132f3114 100644 --- a/app/kumactl/cmd/install/testdata/install-cp-helm/fix7824.golden.yaml +++ b/app/kumactl/cmd/install/testdata/install-cp-helm/fix7824.golden.yaml @@ -428,7 +428,7 @@ spec: metadata: annotations: checksum/config: fd9d1d8386f97f2bd49e50f476520816168a1c9f60bbc43dec1347a64d239155 - checksum/tls-secrets: ec0bc0b5613dc75c86fb3dc148f404db4eaec3e3817ee4eba2a70fd1bc535999 + checksum/tls-secrets: ef229d2d8e83f89fc76345a85158c87105b2b3553cbfbba83b25dce66479a6e3 labels: app: kuma-control-plane app.kubernetes.io/name: kuma @@ -1050,30 +1050,6 @@ webhooks: resources: - pods sideEffects: None - - name: kuma-injector.kuma.io - admissionReviewVersions: ["v1"] - failurePolicy: Ignore - namespaceSelector: - matchExpressions: - - key: kubernetes.io/metadata.name - operator: NotIn - values: ["kube-system"] - clientConfig: - caBundle: XYZ - service: - namespace: kuma-system - name: kuma-control-plane - path: /inject-sidecar - rules: - - apiGroups: - - "" - apiVersions: - - v1 - operations: - - CREATE - resources: - - pods - sideEffects: None --- apiVersion: admissionregistration.k8s.io/v1 kind: ValidatingWebhookConfiguration diff --git a/app/kumactl/cmd/install/testdata/install-cp-helm/minReadySeconds.golden.yaml b/app/kumactl/cmd/install/testdata/install-cp-helm/minReadySeconds.golden.yaml index d7f0889734d8..071dad2f3742 100644 --- a/app/kumactl/cmd/install/testdata/install-cp-helm/minReadySeconds.golden.yaml +++ b/app/kumactl/cmd/install/testdata/install-cp-helm/minReadySeconds.golden.yaml @@ -351,7 +351,7 @@ spec: metadata: annotations: checksum/config: fd9d1d8386f97f2bd49e50f476520816168a1c9f60bbc43dec1347a64d239155 - checksum/tls-secrets: ec0bc0b5613dc75c86fb3dc148f404db4eaec3e3817ee4eba2a70fd1bc535999 + checksum/tls-secrets: ef229d2d8e83f89fc76345a85158c87105b2b3553cbfbba83b25dce66479a6e3 labels: app: kuma-control-plane app.kubernetes.io/name: kuma @@ -646,30 +646,6 @@ webhooks: resources: - pods sideEffects: None - - name: kuma-injector.kuma.io - admissionReviewVersions: ["v1"] - failurePolicy: Ignore - namespaceSelector: - matchExpressions: - - key: kubernetes.io/metadata.name - operator: NotIn - values: ["kube-system"] - clientConfig: - caBundle: XYZ - service: - namespace: kuma-system - name: kuma-control-plane - path: /inject-sidecar - rules: - - apiGroups: - - "" - apiVersions: - - v1 - operations: - - CREATE - resources: - - pods - sideEffects: None --- apiVersion: admissionregistration.k8s.io/v1 kind: ValidatingWebhookConfiguration diff --git a/app/kumactl/cmd/install/testdata/install-cp-helm/securityContext.golden.yaml b/app/kumactl/cmd/install/testdata/install-cp-helm/securityContext.golden.yaml index 0ccac830d5fb..b5e33a191c65 100644 --- a/app/kumactl/cmd/install/testdata/install-cp-helm/securityContext.golden.yaml +++ b/app/kumactl/cmd/install/testdata/install-cp-helm/securityContext.golden.yaml @@ -351,7 +351,7 @@ spec: metadata: annotations: checksum/config: fd9d1d8386f97f2bd49e50f476520816168a1c9f60bbc43dec1347a64d239155 - checksum/tls-secrets: ec0bc0b5613dc75c86fb3dc148f404db4eaec3e3817ee4eba2a70fd1bc535999 + checksum/tls-secrets: ef229d2d8e83f89fc76345a85158c87105b2b3553cbfbba83b25dce66479a6e3 labels: app: kuma-control-plane app.kubernetes.io/name: kuma @@ -647,30 +647,6 @@ webhooks: resources: - pods sideEffects: None - - name: kuma-injector.kuma.io - admissionReviewVersions: ["v1"] - failurePolicy: Ignore - namespaceSelector: - matchExpressions: - - key: kubernetes.io/metadata.name - operator: NotIn - values: ["kube-system"] - clientConfig: - caBundle: XYZ - service: - namespace: kuma-system - name: kuma-control-plane - path: /inject-sidecar - rules: - - apiGroups: - - "" - apiVersions: - - v1 - operations: - - CREATE - resources: - - pods - sideEffects: None --- apiVersion: admissionregistration.k8s.io/v1 kind: ValidatingWebhookConfiguration diff --git a/deployments/charts/kuma/templates/cp-webhooks-and-secrets.yaml b/deployments/charts/kuma/templates/cp-webhooks-and-secrets.yaml index 6d7e4b27558a..ba3bab2559cb 100644 --- a/deployments/charts/kuma/templates/cp-webhooks-and-secrets.yaml +++ b/deployments/charts/kuma/templates/cp-webhooks-and-secrets.yaml @@ -180,30 +180,6 @@ webhooks: resources: - pods sideEffects: None - - name: kuma-injector.kuma.io - admissionReviewVersions: ["v1"] - failurePolicy: Ignore {{/* Failure policy is hardcoded as Ignore because any other mode will cause CP to be unable to start after all instances are down */}} - namespaceSelector: - matchExpressions: - - key: kubernetes.io/metadata.name - operator: NotIn - values: ["kube-system"] - clientConfig: - caBundle: {{ $caBundle }} - service: - namespace: {{ .Release.Namespace }} - name: {{ include "kuma.controlPlane.serviceName" . }} - path: /inject-sidecar - rules: - - apiGroups: - - "" - apiVersions: - - v1 - operations: - - CREATE - resources: - - pods - sideEffects: None {{- end }} --- apiVersion: admissionregistration.k8s.io/v1