diff --git a/charts/kong/CHANGELOG.md b/charts/kong/CHANGELOG.md index 02ea410e9..445147120 100644 --- a/charts/kong/CHANGELOG.md +++ b/charts/kong/CHANGELOG.md @@ -12,6 +12,11 @@ * Bumped default `kong` image tag to 3.7. [#1131](https://github.com/Kong/charts/pull/1131) +* Add new admission webhook configuration fields: + * `matchPolicy` + * `matchConditions` and + * `objectSelector` + [#1133](https://github.com/Kong/charts/pull/1133) ## 2.41.1 diff --git a/charts/kong/Chart.yaml b/charts/kong/Chart.yaml index 1dc70f8e6..74c5da55a 100644 --- a/charts/kong/Chart.yaml +++ b/charts/kong/Chart.yaml @@ -8,7 +8,7 @@ maintainers: name: kong sources: - https://github.com/Kong/charts/tree/main/charts/kong -version: 2.41.1 +version: 2.42.0 appVersion: "3.7" dependencies: - name: postgresql diff --git a/charts/kong/ci/__snapshots__/admin-api-service-clusterip-values.snap b/charts/kong/ci/__snapshots__/admin-api-service-clusterip-values.snap index 8f4fa5e76..4bb992725 100644 --- a/charts/kong/ci/__snapshots__/admin-api-service-clusterip-values.snap +++ b/charts/kong/ci/__snapshots__/admin-api-service-clusterip-values.snap @@ -6,7 +6,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong namespace: default --- @@ -28,7 +28,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong-custom-dbless-config namespace: default --- @@ -40,7 +40,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong-admin namespace: default spec: @@ -63,7 +63,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong-manager namespace: default spec: @@ -91,7 +91,7 @@ metadata: app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" enable-metrics: "true" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong-proxy namespace: default spec: @@ -119,7 +119,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong namespace: default spec: @@ -144,7 +144,7 @@ spec: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 version: "3.7" spec: automountServiceAccountToken: false diff --git a/charts/kong/ci/__snapshots__/admission-webhook-configuration.snap b/charts/kong/ci/__snapshots__/admission-webhook-configuration.snap new file mode 100644 index 000000000..ad3284b53 --- /dev/null +++ b/charts/kong/ci/__snapshots__/admission-webhook-configuration.snap @@ -0,0 +1,983 @@ +apiVersion: v1 +kind: ServiceAccount +metadata: + labels: + app.kubernetes.io/instance: chartsnap + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: kong + app.kubernetes.io/version: "3.7" + helm.sh/chart: kong-2.42.0 + name: chartsnap-kong + namespace: default +--- +apiVersion: v1 +data: + tls.crt: '###DYNAMIC_FIELD###' + tls.key: '###DYNAMIC_FIELD###' +kind: Secret +metadata: + labels: + app.kubernetes.io/instance: chartsnap + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: kong + app.kubernetes.io/version: "3.7" + helm.sh/chart: kong-2.42.0 + name: chartsnap-kong-validation-webhook-ca-keypair + namespace: default +type: kubernetes.io/tls +--- +apiVersion: v1 +data: + tls.crt: '###DYNAMIC_FIELD###' + tls.key: '###DYNAMIC_FIELD###' +kind: Secret +metadata: + labels: + app.kubernetes.io/instance: chartsnap + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: kong + app.kubernetes.io/version: "3.7" + helm.sh/chart: kong-2.42.0 + name: chartsnap-kong-validation-webhook-keypair + namespace: default +type: kubernetes.io/tls +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + labels: + app.kubernetes.io/instance: chartsnap + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: kong + app.kubernetes.io/version: "3.7" + helm.sh/chart: kong-2.42.0 + name: chartsnap-kong +rules: + - apiGroups: + - configuration.konghq.com + resources: + - kongcustomentities + verbs: + - get + - list + - watch + - apiGroups: + - configuration.konghq.com + resources: + - kongcustomentities/status + verbs: + - get + - patch + - update + - apiGroups: + - configuration.konghq.com + resources: + - kongupstreampolicies + verbs: + - get + - list + - watch + - apiGroups: + - configuration.konghq.com + resources: + - kongupstreampolicies/status + verbs: + - get + - patch + - update + - apiGroups: + - configuration.konghq.com + resources: + - kongconsumergroups + verbs: + - get + - list + - watch + - apiGroups: + - configuration.konghq.com + resources: + - kongconsumergroups/status + verbs: + - get + - patch + - update + - apiGroups: + - "" + resources: + - events + verbs: + - create + - patch + - apiGroups: + - "" + resources: + - nodes + verbs: + - list + - watch + - apiGroups: + - "" + resources: + - pods + verbs: + - get + - list + - watch + - apiGroups: + - "" + resources: + - secrets + verbs: + - list + - watch + - apiGroups: + - "" + resources: + - services + verbs: + - get + - list + - watch + - apiGroups: + - "" + resources: + - services/status + verbs: + - get + - patch + - update + - apiGroups: + - configuration.konghq.com + resources: + - ingressclassparameterses + verbs: + - get + - list + - watch + - apiGroups: + - configuration.konghq.com + resources: + - kongconsumers + verbs: + - get + - list + - watch + - apiGroups: + - configuration.konghq.com + resources: + - kongconsumers/status + verbs: + - get + - patch + - update + - apiGroups: + - configuration.konghq.com + resources: + - kongingresses + verbs: + - get + - list + - watch + - apiGroups: + - configuration.konghq.com + resources: + - kongingresses/status + verbs: + - get + - patch + - update + - apiGroups: + - configuration.konghq.com + resources: + - kongplugins + verbs: + - get + - list + - watch + - apiGroups: + - configuration.konghq.com + resources: + - kongplugins/status + verbs: + - get + - patch + - update + - apiGroups: + - configuration.konghq.com + resources: + - tcpingresses + verbs: + - get + - list + - watch + - apiGroups: + - configuration.konghq.com + resources: + - tcpingresses/status + verbs: + - get + - patch + - update + - apiGroups: + - configuration.konghq.com + resources: + - udpingresses + verbs: + - get + - list + - watch + - apiGroups: + - configuration.konghq.com + resources: + - udpingresses/status + verbs: + - get + - patch + - update + - apiGroups: + - extensions + resources: + - ingresses + verbs: + - get + - list + - watch + - apiGroups: + - extensions + resources: + - ingresses/status + verbs: + - get + - patch + - update + - apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: + - get + - list + - watch + - apiGroups: + - networking.k8s.io + resources: + - ingresses/status + verbs: + - get + - patch + - update + - apiGroups: + - discovery.k8s.io + resources: + - endpointslices + verbs: + - get + - list + - watch + - apiGroups: + - configuration.konghq.com + resources: + - konglicenses + verbs: + - get + - list + - watch + - apiGroups: + - configuration.konghq.com + resources: + - konglicenses/status + verbs: + - get + - patch + - update + - apiGroups: + - configuration.konghq.com + resources: + - kongvaults + verbs: + - get + - list + - watch + - apiGroups: + - configuration.konghq.com + resources: + - kongvaults/status + verbs: + - get + - patch + - update + - apiGroups: + - configuration.konghq.com + resources: + - kongclusterplugins + verbs: + - get + - list + - watch + - apiGroups: + - configuration.konghq.com + resources: + - kongclusterplugins/status + verbs: + - get + - patch + - update + - apiGroups: + - apiextensions.k8s.io + resources: + - customresourcedefinitions + verbs: + - list + - watch + - apiGroups: + - networking.k8s.io + resources: + - ingressclasses + verbs: + - get + - list + - watch +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + labels: + app.kubernetes.io/instance: chartsnap + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: kong + app.kubernetes.io/version: "3.7" + helm.sh/chart: kong-2.42.0 + name: chartsnap-kong +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: chartsnap-kong +subjects: + - kind: ServiceAccount + name: chartsnap-kong + namespace: default +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + labels: + app.kubernetes.io/instance: chartsnap + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: kong + app.kubernetes.io/version: "3.7" + helm.sh/chart: kong-2.42.0 + name: chartsnap-kong + namespace: default +rules: + - apiGroups: + - "" + resources: + - configmaps + - pods + - secrets + - namespaces + verbs: + - get + - apiGroups: + - "" + resourceNames: + - kong-ingress-controller-leader-kong-kong + resources: + - configmaps + verbs: + - get + - update + - apiGroups: + - "" + resources: + - configmaps + verbs: + - create + - apiGroups: + - "" + - coordination.k8s.io + resources: + - configmaps + - leases + verbs: + - get + - list + - watch + - create + - update + - patch + - delete + - apiGroups: + - "" + resources: + - events + verbs: + - create + - patch + - apiGroups: + - "" + resources: + - services + verbs: + - get +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + labels: + app.kubernetes.io/instance: chartsnap + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: kong + app.kubernetes.io/version: "3.7" + helm.sh/chart: kong-2.42.0 + name: chartsnap-kong + namespace: default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: chartsnap-kong +subjects: + - kind: ServiceAccount + name: chartsnap-kong + namespace: default +--- +apiVersion: v1 +kind: Service +metadata: + labels: + app.kubernetes.io/instance: chartsnap + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: kong + app.kubernetes.io/version: "3.7" + helm.sh/chart: kong-2.42.0 + name: chartsnap-kong-validation-webhook + namespace: default +spec: + ports: + - name: webhook + port: 443 + protocol: TCP + targetPort: webhook + selector: + app.kubernetes.io/component: app + app.kubernetes.io/instance: chartsnap + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: kong + app.kubernetes.io/version: "3.7" + helm.sh/chart: kong-2.42.0 +--- +apiVersion: v1 +kind: Service +metadata: + labels: + app.kubernetes.io/instance: chartsnap + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: kong + app.kubernetes.io/version: "3.7" + helm.sh/chart: kong-2.42.0 + name: chartsnap-kong-manager + namespace: default +spec: + ports: + - name: kong-manager + port: 8002 + protocol: TCP + targetPort: 8002 + - name: kong-manager-tls + port: 8445 + protocol: TCP + targetPort: 8445 + selector: + app.kubernetes.io/component: app + app.kubernetes.io/instance: chartsnap + app.kubernetes.io/name: kong + type: NodePort +--- +apiVersion: v1 +kind: Service +metadata: + labels: + app.kubernetes.io/instance: chartsnap + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: kong + app.kubernetes.io/version: "3.7" + enable-metrics: "true" + helm.sh/chart: kong-2.42.0 + name: chartsnap-kong-proxy + namespace: default +spec: + ports: + - name: kong-proxy + port: 80 + protocol: TCP + targetPort: 8000 + - name: kong-proxy-tls + port: 443 + protocol: TCP + targetPort: 8443 + selector: + app.kubernetes.io/component: app + app.kubernetes.io/instance: chartsnap + app.kubernetes.io/name: kong + type: LoadBalancer +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + labels: + app.kubernetes.io/component: app + app.kubernetes.io/instance: chartsnap + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: kong + app.kubernetes.io/version: "3.7" + helm.sh/chart: kong-2.42.0 + name: chartsnap-kong + namespace: default +spec: + replicas: 1 + revisionHistoryLimit: 10 + selector: + matchLabels: + app.kubernetes.io/component: app + app.kubernetes.io/instance: chartsnap + app.kubernetes.io/name: kong + template: + metadata: + annotations: + kuma.io/gateway: enabled + kuma.io/service-account-token-volume: chartsnap-kong-token + traffic.sidecar.istio.io/includeInboundPorts: "" + labels: + app: chartsnap-kong + app.kubernetes.io/component: app + app.kubernetes.io/instance: chartsnap + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: kong + app.kubernetes.io/version: "3.7" + helm.sh/chart: kong-2.42.0 + version: "3.7" + spec: + automountServiceAccountToken: false + containers: + - args: null + env: + - name: POD_NAME + valueFrom: + fieldRef: + apiVersion: v1 + fieldPath: metadata.name + - name: POD_NAMESPACE + valueFrom: + fieldRef: + apiVersion: v1 + fieldPath: metadata.namespace + - name: CONTROLLER_ADMISSION_WEBHOOK_LISTEN + value: 0.0.0.0:8080 + - name: CONTROLLER_ELECTION_ID + value: kong-ingress-controller-leader-kong + - name: CONTROLLER_INGRESS_CLASS + value: kong + - name: CONTROLLER_KONG_ADMIN_TLS_SKIP_VERIFY + value: "true" + - name: CONTROLLER_KONG_ADMIN_URL + value: https://localhost:8444 + - name: CONTROLLER_PUBLISH_SERVICE + value: default/chartsnap-kong-proxy + image: kong/kubernetes-ingress-controller:3.3 + imagePullPolicy: IfNotPresent + livenessProbe: + failureThreshold: 3 + httpGet: + path: /healthz + port: 10254 + scheme: HTTP + initialDelaySeconds: 5 + periodSeconds: 10 + successThreshold: 1 + timeoutSeconds: 5 + name: ingress-controller + ports: + - containerPort: 8080 + name: webhook + protocol: TCP + - containerPort: 10255 + name: cmetrics + protocol: TCP + - containerPort: 10254 + name: cstatus + protocol: TCP + readinessProbe: + failureThreshold: 3 + httpGet: + path: /readyz + port: 10254 + scheme: HTTP + initialDelaySeconds: 5 + periodSeconds: 10 + successThreshold: 1 + timeoutSeconds: 5 + resources: {} + securityContext: + allowPrivilegeEscalation: false + capabilities: + drop: + - ALL + readOnlyRootFilesystem: true + runAsNonRoot: true + runAsUser: 1000 + seccompProfile: + type: RuntimeDefault + volumeMounts: + - mountPath: /admission-webhook + name: webhook-cert + readOnly: true + - mountPath: /var/run/secrets/kubernetes.io/serviceaccount + name: chartsnap-kong-token + readOnly: true + - env: + - name: KONG_ADMIN_ACCESS_LOG + value: /dev/stdout + - name: KONG_ADMIN_ERROR_LOG + value: /dev/stderr + - name: KONG_ADMIN_GUI_ACCESS_LOG + value: /dev/stdout + - name: KONG_ADMIN_GUI_ERROR_LOG + value: /dev/stderr + - name: KONG_ADMIN_LISTEN + value: 127.0.0.1:8444 http2 ssl, [::1]:8444 http2 ssl + - name: KONG_CLUSTER_LISTEN + value: "off" + - name: KONG_DATABASE + value: "off" + - name: KONG_KIC + value: "on" + - name: KONG_LUA_PACKAGE_PATH + value: /opt/?.lua;/opt/?/init.lua;; + - name: KONG_NGINX_WORKER_PROCESSES + value: "2" + - name: KONG_PORTAL_API_ACCESS_LOG + value: /dev/stdout + - name: KONG_PORTAL_API_ERROR_LOG + value: /dev/stderr + - name: KONG_PORT_MAPS + value: 80:8000, 443:8443 + - name: KONG_PREFIX + value: /kong_prefix/ + - name: KONG_PROXY_ACCESS_LOG + value: /dev/stdout + - name: KONG_PROXY_ERROR_LOG + value: /dev/stderr + - name: KONG_PROXY_LISTEN + value: 0.0.0.0:8000, [::]:8000, 0.0.0.0:8443 http2 ssl, [::]:8443 http2 ssl + - name: KONG_PROXY_STREAM_ACCESS_LOG + value: /dev/stdout basic + - name: KONG_PROXY_STREAM_ERROR_LOG + value: /dev/stderr + - name: KONG_ROUTER_FLAVOR + value: traditional + - name: KONG_STATUS_ACCESS_LOG + value: "off" + - name: KONG_STATUS_ERROR_LOG + value: /dev/stderr + - name: KONG_STATUS_LISTEN + value: 0.0.0.0:8100, [::]:8100 + - name: KONG_STREAM_LISTEN + value: "off" + - name: KONG_NGINX_DAEMON + value: "off" + image: kong:3.7 + imagePullPolicy: IfNotPresent + lifecycle: + preStop: + exec: + command: + - kong + - quit + - --wait=15 + livenessProbe: + failureThreshold: 3 + httpGet: + path: /status + port: status + scheme: HTTP + initialDelaySeconds: 5 + periodSeconds: 10 + successThreshold: 1 + timeoutSeconds: 5 + name: proxy + ports: + - containerPort: 8000 + name: proxy + protocol: TCP + - containerPort: 8443 + name: proxy-tls + protocol: TCP + - containerPort: 8100 + name: status + protocol: TCP + readinessProbe: + failureThreshold: 3 + httpGet: + path: /status/ready + port: status + scheme: HTTP + initialDelaySeconds: 5 + periodSeconds: 10 + successThreshold: 1 + timeoutSeconds: 5 + resources: {} + securityContext: + allowPrivilegeEscalation: false + capabilities: + drop: + - ALL + readOnlyRootFilesystem: true + runAsNonRoot: true + runAsUser: 1000 + seccompProfile: + type: RuntimeDefault + volumeMounts: + - mountPath: /kong_prefix/ + name: chartsnap-kong-prefix-dir + - mountPath: /tmp + name: chartsnap-kong-tmp + initContainers: + - command: + - rm + - -vrf + - $KONG_PREFIX/pids + env: + - name: KONG_ADMIN_ACCESS_LOG + value: /dev/stdout + - name: KONG_ADMIN_ERROR_LOG + value: /dev/stderr + - name: KONG_ADMIN_GUI_ACCESS_LOG + value: /dev/stdout + - name: KONG_ADMIN_GUI_ERROR_LOG + value: /dev/stderr + - name: KONG_ADMIN_LISTEN + value: 127.0.0.1:8444 http2 ssl, [::1]:8444 http2 ssl + - name: KONG_CLUSTER_LISTEN + value: "off" + - name: KONG_DATABASE + value: "off" + - name: KONG_KIC + value: "on" + - name: KONG_LUA_PACKAGE_PATH + value: /opt/?.lua;/opt/?/init.lua;; + - name: KONG_NGINX_WORKER_PROCESSES + value: "2" + - name: KONG_PORTAL_API_ACCESS_LOG + value: /dev/stdout + - name: KONG_PORTAL_API_ERROR_LOG + value: /dev/stderr + - name: KONG_PORT_MAPS + value: 80:8000, 443:8443 + - name: KONG_PREFIX + value: /kong_prefix/ + - name: KONG_PROXY_ACCESS_LOG + value: /dev/stdout + - name: KONG_PROXY_ERROR_LOG + value: /dev/stderr + - name: KONG_PROXY_LISTEN + value: 0.0.0.0:8000, [::]:8000, 0.0.0.0:8443 http2 ssl, [::]:8443 http2 ssl + - name: KONG_PROXY_STREAM_ACCESS_LOG + value: /dev/stdout basic + - name: KONG_PROXY_STREAM_ERROR_LOG + value: /dev/stderr + - name: KONG_ROUTER_FLAVOR + value: traditional + - name: KONG_STATUS_ACCESS_LOG + value: "off" + - name: KONG_STATUS_ERROR_LOG + value: /dev/stderr + - name: KONG_STATUS_LISTEN + value: 0.0.0.0:8100, [::]:8100 + - name: KONG_STREAM_LISTEN + value: "off" + image: kong:3.7 + imagePullPolicy: IfNotPresent + name: clear-stale-pid + resources: {} + securityContext: + allowPrivilegeEscalation: false + capabilities: + drop: + - ALL + readOnlyRootFilesystem: true + runAsNonRoot: true + runAsUser: 1000 + seccompProfile: + type: RuntimeDefault + volumeMounts: + - mountPath: /kong_prefix/ + name: chartsnap-kong-prefix-dir + - mountPath: /tmp + name: chartsnap-kong-tmp + securityContext: {} + serviceAccountName: chartsnap-kong + terminationGracePeriodSeconds: 30 + volumes: + - emptyDir: + sizeLimit: 256Mi + name: chartsnap-kong-prefix-dir + - emptyDir: + sizeLimit: 1Gi + name: chartsnap-kong-tmp + - name: chartsnap-kong-token + projected: + sources: + - serviceAccountToken: + expirationSeconds: 3607 + path: token + - configMap: + items: + - key: ca.crt + path: ca.crt + name: kube-root-ca.crt + - downwardAPI: + items: + - fieldRef: + apiVersion: v1 + fieldPath: metadata.namespace + path: namespace + - name: webhook-cert + secret: + secretName: chartsnap-kong-validation-webhook-keypair +--- +apiVersion: admissionregistration.k8s.io/v1 +kind: ValidatingWebhookConfiguration +metadata: + labels: + app.kubernetes.io/instance: chartsnap + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: kong + app.kubernetes.io/version: "3.7" + helm.sh/chart: kong-2.42.0 + name: chartsnap-kong-validations + namespace: default +webhooks: + - admissionReviewVersions: + - v1 + clientConfig: + caBundle: '###DYNAMIC_FIELD###' + service: + name: chartsnap-kong-validation-webhook + namespace: default + failurePolicy: Ignore + matchPolicy: Exact + name: secrets.credentials.validation.ingress-controller.konghq.com + objectSelector: + matchExpressions: + - key: konghq.com/credential + operator: Exists + rules: + - apiGroups: + - "" + apiVersions: + - v1 + operations: + - CREATE + - UPDATE + resources: + - secrets + sideEffects: None + timeoutSeconds: 5 + - admissionReviewVersions: + - v1 + clientConfig: + caBundle: '###DYNAMIC_FIELD###' + service: + name: chartsnap-kong-validation-webhook + namespace: default + failurePolicy: Ignore + matchPolicy: Exact + name: secrets.plugins.validation.ingress-controller.konghq.com + objectSelector: + matchExpressions: + - key: konghq.com/validate + operator: Exists + rules: + - apiGroups: + - "" + apiVersions: + - v1 + operations: + - CREATE + - UPDATE + resources: + - secrets + sideEffects: None + timeoutSeconds: 5 + - admissionReviewVersions: + - v1beta1 + clientConfig: + caBundle: '###DYNAMIC_FIELD###' + service: + name: chartsnap-kong-validation-webhook + namespace: default + failurePolicy: Ignore + matchConditions: + - expression: '!(request.resource.group == "coordination.k8s.io" && request.resource.resource == "leases")' + name: exclude-leases + - expression: '!("system:nodes" in request.userInfo.groups)' + name: exclude-kubelet-requests + - expression: request.resource.group != "rbac.authorization.k8s.io" + name: rbac + matchPolicy: Exact + name: validations.kong.konghq.com + objectSelector: + matchExpressions: + - key: owner + operator: NotIn + values: + - helm + - key: infra + operator: In + values: + - cloud + rules: + - apiGroups: + - configuration.konghq.com + apiVersions: + - '*' + operations: + - CREATE + - UPDATE + resources: + - kongconsumers + - kongplugins + - kongclusterplugins + - kongingresses + - apiGroups: + - "" + apiVersions: + - v1 + operations: + - CREATE + - UPDATE + resources: + - services + - apiGroups: + - networking.k8s.io + apiVersions: + - v1 + operations: + - CREATE + - UPDATE + resources: + - ingresses + - apiGroups: + - gateway.networking.k8s.io + apiVersions: + - v1alpha2 + - v1beta1 + - v1 + operations: + - CREATE + - UPDATE + resources: + - gateways + - httproutes + sideEffects: None + timeoutSeconds: 5 diff --git a/charts/kong/ci/__snapshots__/custom-entities-rbac-3.2-values.snap b/charts/kong/ci/__snapshots__/custom-entities-rbac-3.2-values.snap index a8914d308..871ec2cda 100644 --- a/charts/kong/ci/__snapshots__/custom-entities-rbac-3.2-values.snap +++ b/charts/kong/ci/__snapshots__/custom-entities-rbac-3.2-values.snap @@ -6,7 +6,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong namespace: default --- @@ -21,7 +21,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong-validation-webhook-ca-keypair namespace: default type: kubernetes.io/tls @@ -37,7 +37,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong-validation-webhook-keypair namespace: default type: kubernetes.io/tls @@ -50,7 +50,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong rules: - apiGroups: @@ -346,7 +346,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong roleRef: apiGroup: rbac.authorization.k8s.io @@ -365,7 +365,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong namespace: default rules: @@ -429,7 +429,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong namespace: default roleRef: @@ -449,7 +449,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong-validation-webhook namespace: default spec: @@ -464,7 +464,7 @@ spec: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 --- apiVersion: v1 kind: Service @@ -474,7 +474,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong-manager namespace: default spec: @@ -502,7 +502,7 @@ metadata: app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" enable-metrics: "true" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong-proxy namespace: default spec: @@ -530,7 +530,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong namespace: default spec: @@ -554,7 +554,7 @@ spec: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 version: "3.7" spec: automountServiceAccountToken: false @@ -859,7 +859,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong-validations namespace: default webhooks: @@ -923,6 +923,7 @@ webhooks: name: chartsnap-kong-validation-webhook namespace: default failurePolicy: Ignore + matchPolicy: Equivalent name: validations.kong.konghq.com objectSelector: matchExpressions: diff --git a/charts/kong/ci/__snapshots__/custom-labels-values.snap b/charts/kong/ci/__snapshots__/custom-labels-values.snap index 8964298c4..22c1b02f1 100644 --- a/charts/kong/ci/__snapshots__/custom-labels-values.snap +++ b/charts/kong/ci/__snapshots__/custom-labels-values.snap @@ -7,7 +7,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong namespace: default --- @@ -23,7 +23,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong-validation-webhook-ca-keypair namespace: default type: kubernetes.io/tls @@ -40,7 +40,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong-validation-webhook-keypair namespace: default type: kubernetes.io/tls @@ -54,7 +54,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong rules: - apiGroups: @@ -351,7 +351,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong roleRef: apiGroup: rbac.authorization.k8s.io @@ -371,7 +371,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong namespace: default rules: @@ -436,7 +436,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong namespace: default roleRef: @@ -457,7 +457,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong-validation-webhook namespace: default spec: @@ -473,7 +473,7 @@ spec: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 --- apiVersion: v1 kind: Service @@ -484,7 +484,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong-manager namespace: default spec: @@ -513,7 +513,7 @@ metadata: app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" enable-metrics: "true" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong-proxy namespace: default spec: @@ -542,7 +542,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong namespace: default spec: @@ -567,7 +567,7 @@ spec: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 version: "3.7" spec: automountServiceAccountToken: false @@ -871,7 +871,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong-validations namespace: default webhooks: @@ -935,6 +935,7 @@ webhooks: name: chartsnap-kong-validation-webhook namespace: default failurePolicy: Ignore + matchPolicy: Equivalent name: validations.kong.konghq.com objectSelector: matchExpressions: diff --git a/charts/kong/ci/__snapshots__/default-values.snap b/charts/kong/ci/__snapshots__/default-values.snap index 279a1615b..21dd5a9d1 100644 --- a/charts/kong/ci/__snapshots__/default-values.snap +++ b/charts/kong/ci/__snapshots__/default-values.snap @@ -6,7 +6,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong namespace: default --- @@ -21,7 +21,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong-validation-webhook-ca-keypair namespace: default type: kubernetes.io/tls @@ -37,7 +37,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong-validation-webhook-keypair namespace: default type: kubernetes.io/tls @@ -50,7 +50,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong rules: - apiGroups: @@ -346,7 +346,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong roleRef: apiGroup: rbac.authorization.k8s.io @@ -365,7 +365,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong namespace: default rules: @@ -429,7 +429,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong namespace: default roleRef: @@ -449,7 +449,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong-validation-webhook namespace: default spec: @@ -464,7 +464,7 @@ spec: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 --- apiVersion: v1 kind: Service @@ -474,7 +474,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong-manager namespace: default spec: @@ -502,7 +502,7 @@ metadata: app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" enable-metrics: "true" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong-proxy namespace: default spec: @@ -530,7 +530,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong namespace: default spec: @@ -554,7 +554,7 @@ spec: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 version: "3.7" spec: automountServiceAccountToken: false @@ -859,7 +859,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong-validations namespace: default webhooks: @@ -923,6 +923,7 @@ webhooks: name: chartsnap-kong-validation-webhook namespace: default failurePolicy: Ignore + matchPolicy: Equivalent name: validations.kong.konghq.com objectSelector: matchExpressions: diff --git a/charts/kong/ci/__snapshots__/enterprise-postgres-basicauth.snap b/charts/kong/ci/__snapshots__/enterprise-postgres-basicauth.snap index 8eeb5fd2f..050e79b33 100644 --- a/charts/kong/ci/__snapshots__/enterprise-postgres-basicauth.snap +++ b/charts/kong/ci/__snapshots__/enterprise-postgres-basicauth.snap @@ -6,7 +6,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.6" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong namespace: default --- @@ -18,7 +18,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.6" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong-manager namespace: default spec: @@ -45,7 +45,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.6" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong-portalapi namespace: default spec: @@ -72,7 +72,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.6" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong-portal namespace: default spec: @@ -100,7 +100,7 @@ metadata: app.kubernetes.io/name: kong app.kubernetes.io/version: "3.6" enable-metrics: "true" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong-proxy namespace: default spec: @@ -128,7 +128,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.6" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong namespace: default spec: @@ -152,7 +152,7 @@ spec: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.6" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 version: "3.6" spec: automountServiceAccountToken: false diff --git a/charts/kong/ci/__snapshots__/enterprise-postgres-openidconnect-below-360.snap b/charts/kong/ci/__snapshots__/enterprise-postgres-openidconnect-below-360.snap index d1eb5b96f..2ffe92c23 100644 --- a/charts/kong/ci/__snapshots__/enterprise-postgres-openidconnect-below-360.snap +++ b/charts/kong/ci/__snapshots__/enterprise-postgres-openidconnect-below-360.snap @@ -6,7 +6,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.5" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong namespace: default --- @@ -18,7 +18,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.5" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong-manager namespace: default spec: @@ -45,7 +45,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.5" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong-portalapi namespace: default spec: @@ -72,7 +72,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.5" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong-portal namespace: default spec: @@ -100,7 +100,7 @@ metadata: app.kubernetes.io/name: kong app.kubernetes.io/version: "3.5" enable-metrics: "true" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong-proxy namespace: default spec: @@ -128,7 +128,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.5" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong namespace: default spec: @@ -152,7 +152,7 @@ spec: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.5" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 version: "3.5" spec: automountServiceAccountToken: false diff --git a/charts/kong/ci/__snapshots__/enterprise-postgres-openidconnect.snap b/charts/kong/ci/__snapshots__/enterprise-postgres-openidconnect.snap index 9ee048089..5aef4911d 100644 --- a/charts/kong/ci/__snapshots__/enterprise-postgres-openidconnect.snap +++ b/charts/kong/ci/__snapshots__/enterprise-postgres-openidconnect.snap @@ -6,7 +6,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.6" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong namespace: default --- @@ -18,7 +18,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.6" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong-manager namespace: default spec: @@ -45,7 +45,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.6" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong-portalapi namespace: default spec: @@ -72,7 +72,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.6" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong-portal namespace: default spec: @@ -100,7 +100,7 @@ metadata: app.kubernetes.io/name: kong app.kubernetes.io/version: "3.6" enable-metrics: "true" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong-proxy namespace: default spec: @@ -128,7 +128,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.6" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong namespace: default spec: @@ -152,7 +152,7 @@ spec: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.6" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 version: "3.6" spec: automountServiceAccountToken: false diff --git a/charts/kong/ci/__snapshots__/kong-ingress-1-values.snap b/charts/kong/ci/__snapshots__/kong-ingress-1-values.snap index 7310555c8..340db68ad 100644 --- a/charts/kong/ci/__snapshots__/kong-ingress-1-values.snap +++ b/charts/kong/ci/__snapshots__/kong-ingress-1-values.snap @@ -6,7 +6,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong namespace: default --- @@ -21,7 +21,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong-validation-webhook-ca-keypair namespace: default type: kubernetes.io/tls @@ -37,7 +37,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong-validation-webhook-keypair namespace: default type: kubernetes.io/tls @@ -59,7 +59,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong rules: - apiGroups: @@ -355,7 +355,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong roleRef: apiGroup: rbac.authorization.k8s.io @@ -374,7 +374,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong namespace: default rules: @@ -438,7 +438,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong namespace: default roleRef: @@ -458,7 +458,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong-validation-webhook namespace: default spec: @@ -473,7 +473,7 @@ spec: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 --- apiVersion: v1 kind: Service @@ -483,7 +483,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong-manager namespace: default spec: @@ -511,7 +511,7 @@ metadata: app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" enable-metrics: "true" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong-proxy namespace: default spec: @@ -539,7 +539,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong namespace: default spec: @@ -563,7 +563,7 @@ spec: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 version: "3.7" spec: automountServiceAccountToken: false @@ -868,7 +868,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong-proxy namespace: default spec: @@ -894,7 +894,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong-validations namespace: default webhooks: @@ -958,6 +958,7 @@ webhooks: name: chartsnap-kong-validation-webhook namespace: default failurePolicy: Ignore + matchPolicy: Equivalent name: validations.kong.konghq.com objectSelector: matchExpressions: diff --git a/charts/kong/ci/__snapshots__/kong-ingress-2-values.snap b/charts/kong/ci/__snapshots__/kong-ingress-2-values.snap index 9899cbc74..e4654d790 100644 --- a/charts/kong/ci/__snapshots__/kong-ingress-2-values.snap +++ b/charts/kong/ci/__snapshots__/kong-ingress-2-values.snap @@ -6,7 +6,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong namespace: default --- @@ -21,7 +21,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong-validation-webhook-ca-keypair namespace: default type: kubernetes.io/tls @@ -37,7 +37,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong-validation-webhook-keypair namespace: default type: kubernetes.io/tls @@ -59,7 +59,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong rules: - apiGroups: @@ -355,7 +355,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong roleRef: apiGroup: rbac.authorization.k8s.io @@ -374,7 +374,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong namespace: default rules: @@ -438,7 +438,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong namespace: default roleRef: @@ -458,7 +458,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong-validation-webhook namespace: default spec: @@ -473,7 +473,7 @@ spec: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 --- apiVersion: v1 kind: Service @@ -483,7 +483,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong-manager namespace: default spec: @@ -511,7 +511,7 @@ metadata: app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" enable-metrics: "true" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong-proxy namespace: default spec: @@ -539,7 +539,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong namespace: default spec: @@ -563,7 +563,7 @@ spec: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 version: "3.7" spec: automountServiceAccountToken: false @@ -868,7 +868,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong-proxy namespace: default spec: @@ -896,7 +896,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong-validations namespace: default webhooks: @@ -960,6 +960,7 @@ webhooks: name: chartsnap-kong-validation-webhook namespace: default failurePolicy: Ignore + matchPolicy: Equivalent name: validations.kong.konghq.com objectSelector: matchExpressions: diff --git a/charts/kong/ci/__snapshots__/kong-ingress-3-values.snap b/charts/kong/ci/__snapshots__/kong-ingress-3-values.snap index 40218c0d7..b62b8936a 100644 --- a/charts/kong/ci/__snapshots__/kong-ingress-3-values.snap +++ b/charts/kong/ci/__snapshots__/kong-ingress-3-values.snap @@ -6,7 +6,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong namespace: default --- @@ -21,7 +21,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong-validation-webhook-ca-keypair namespace: default type: kubernetes.io/tls @@ -37,7 +37,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong-validation-webhook-keypair namespace: default type: kubernetes.io/tls @@ -50,7 +50,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong rules: - apiGroups: @@ -346,7 +346,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong roleRef: apiGroup: rbac.authorization.k8s.io @@ -365,7 +365,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong namespace: default rules: @@ -429,7 +429,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong namespace: default roleRef: @@ -449,7 +449,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong-validation-webhook namespace: default spec: @@ -464,7 +464,7 @@ spec: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 --- apiVersion: v1 kind: Service @@ -474,7 +474,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong-manager namespace: default spec: @@ -502,7 +502,7 @@ metadata: app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" enable-metrics: "true" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong-proxy namespace: default spec: @@ -530,7 +530,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong namespace: default spec: @@ -554,7 +554,7 @@ spec: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 version: "3.7" spec: automountServiceAccountToken: false @@ -859,7 +859,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong-proxy namespace: default spec: @@ -883,7 +883,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong-validations namespace: default webhooks: @@ -947,6 +947,7 @@ webhooks: name: chartsnap-kong-validation-webhook namespace: default failurePolicy: Ignore + matchPolicy: Equivalent name: validations.kong.konghq.com objectSelector: matchExpressions: diff --git a/charts/kong/ci/__snapshots__/kong-ingress-4-values.snap b/charts/kong/ci/__snapshots__/kong-ingress-4-values.snap index b1941534d..73c4bbe69 100644 --- a/charts/kong/ci/__snapshots__/kong-ingress-4-values.snap +++ b/charts/kong/ci/__snapshots__/kong-ingress-4-values.snap @@ -6,7 +6,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong namespace: default --- @@ -21,7 +21,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong-validation-webhook-ca-keypair namespace: default type: kubernetes.io/tls @@ -37,7 +37,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong-validation-webhook-keypair namespace: default type: kubernetes.io/tls @@ -68,7 +68,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong rules: - apiGroups: @@ -364,7 +364,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong roleRef: apiGroup: rbac.authorization.k8s.io @@ -383,7 +383,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong namespace: default rules: @@ -447,7 +447,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong namespace: default roleRef: @@ -467,7 +467,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong-validation-webhook namespace: default spec: @@ -482,7 +482,7 @@ spec: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 --- apiVersion: v1 kind: Service @@ -492,7 +492,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong-manager namespace: default spec: @@ -520,7 +520,7 @@ metadata: app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" enable-metrics: "true" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong-proxy namespace: default spec: @@ -548,7 +548,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong namespace: default spec: @@ -572,7 +572,7 @@ spec: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 version: "3.7" spec: automountServiceAccountToken: false @@ -877,7 +877,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong-proxy namespace: default spec: @@ -936,7 +936,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong-validations namespace: default webhooks: @@ -1000,6 +1000,7 @@ webhooks: name: chartsnap-kong-validation-webhook namespace: default failurePolicy: Ignore + matchPolicy: Equivalent name: validations.kong.konghq.com objectSelector: matchExpressions: diff --git a/charts/kong/ci/__snapshots__/kong-ingress-5-3.1-rbac-values.snap b/charts/kong/ci/__snapshots__/kong-ingress-5-3.1-rbac-values.snap index a38b53e26..5ff1bae91 100644 --- a/charts/kong/ci/__snapshots__/kong-ingress-5-3.1-rbac-values.snap +++ b/charts/kong/ci/__snapshots__/kong-ingress-5-3.1-rbac-values.snap @@ -6,7 +6,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong namespace: default --- @@ -21,7 +21,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong-validation-webhook-ca-keypair namespace: default type: kubernetes.io/tls @@ -37,7 +37,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong-validation-webhook-keypair namespace: default type: kubernetes.io/tls @@ -50,7 +50,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong rules: - apiGroups: @@ -330,7 +330,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong roleRef: apiGroup: rbac.authorization.k8s.io @@ -349,7 +349,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong namespace: default rules: @@ -413,7 +413,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong namespace: default roleRef: @@ -433,7 +433,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong-validation-webhook namespace: default spec: @@ -448,7 +448,7 @@ spec: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 --- apiVersion: v1 kind: Service @@ -458,7 +458,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong-manager namespace: default spec: @@ -486,7 +486,7 @@ metadata: app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" enable-metrics: "true" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong-proxy namespace: default spec: @@ -514,7 +514,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong namespace: default spec: @@ -538,7 +538,7 @@ spec: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 version: "3.7" spec: automountServiceAccountToken: false @@ -843,7 +843,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong-validations namespace: default webhooks: @@ -907,6 +907,7 @@ webhooks: name: chartsnap-kong-validation-webhook namespace: default failurePolicy: Ignore + matchPolicy: Equivalent name: validations.kong.konghq.com objectSelector: matchExpressions: diff --git a/charts/kong/ci/__snapshots__/proxy-appprotocol-values.snap b/charts/kong/ci/__snapshots__/proxy-appprotocol-values.snap index e9609d53d..625b71ca3 100644 --- a/charts/kong/ci/__snapshots__/proxy-appprotocol-values.snap +++ b/charts/kong/ci/__snapshots__/proxy-appprotocol-values.snap @@ -6,7 +6,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong namespace: default --- @@ -21,7 +21,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong-validation-webhook-ca-keypair namespace: default type: kubernetes.io/tls @@ -37,7 +37,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong-validation-webhook-keypair namespace: default type: kubernetes.io/tls @@ -50,7 +50,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong rules: - apiGroups: @@ -346,7 +346,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong roleRef: apiGroup: rbac.authorization.k8s.io @@ -365,7 +365,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong namespace: default rules: @@ -429,7 +429,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong namespace: default roleRef: @@ -449,7 +449,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong-validation-webhook namespace: default spec: @@ -464,7 +464,7 @@ spec: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 --- apiVersion: v1 kind: Service @@ -474,7 +474,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong-manager namespace: default spec: @@ -502,7 +502,7 @@ metadata: app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" enable-metrics: "true" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong-proxy namespace: default spec: @@ -532,7 +532,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong namespace: default spec: @@ -556,7 +556,7 @@ spec: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 version: "3.7" spec: automountServiceAccountToken: false @@ -861,7 +861,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong-validations namespace: default webhooks: @@ -925,6 +925,7 @@ webhooks: name: chartsnap-kong-validation-webhook namespace: default failurePolicy: Ignore + matchPolicy: Equivalent name: validations.kong.konghq.com objectSelector: matchExpressions: diff --git a/charts/kong/ci/__snapshots__/service-account.snap b/charts/kong/ci/__snapshots__/service-account.snap index e2fbf7e05..764eff379 100644 --- a/charts/kong/ci/__snapshots__/service-account.snap +++ b/charts/kong/ci/__snapshots__/service-account.snap @@ -6,7 +6,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: my-kong-sa namespace: default --- @@ -21,7 +21,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong-validation-webhook-ca-keypair namespace: default type: kubernetes.io/tls @@ -37,7 +37,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong-validation-webhook-keypair namespace: default type: kubernetes.io/tls @@ -50,7 +50,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong rules: - apiGroups: @@ -346,7 +346,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong roleRef: apiGroup: rbac.authorization.k8s.io @@ -365,7 +365,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong namespace: default rules: @@ -429,7 +429,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong namespace: default roleRef: @@ -449,7 +449,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong-validation-webhook namespace: default spec: @@ -464,7 +464,7 @@ spec: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 --- apiVersion: v1 kind: Service @@ -474,7 +474,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong-manager namespace: default spec: @@ -502,7 +502,7 @@ metadata: app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" enable-metrics: "true" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong-proxy namespace: default spec: @@ -530,7 +530,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong namespace: default spec: @@ -554,7 +554,7 @@ spec: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 version: "3.7" spec: automountServiceAccountToken: false @@ -859,7 +859,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong-validations namespace: default webhooks: @@ -923,6 +923,7 @@ webhooks: name: chartsnap-kong-validation-webhook namespace: default failurePolicy: Ignore + matchPolicy: Equivalent name: validations.kong.konghq.com objectSelector: matchExpressions: diff --git a/charts/kong/ci/__snapshots__/single-image-default-values.snap b/charts/kong/ci/__snapshots__/single-image-default-values.snap index 533812158..161d89098 100644 --- a/charts/kong/ci/__snapshots__/single-image-default-values.snap +++ b/charts/kong/ci/__snapshots__/single-image-default-values.snap @@ -6,7 +6,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong namespace: default --- @@ -21,7 +21,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong-validation-webhook-ca-keypair namespace: default type: kubernetes.io/tls @@ -37,7 +37,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong-validation-webhook-keypair namespace: default type: kubernetes.io/tls @@ -50,7 +50,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong rules: - apiGroups: @@ -346,7 +346,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong roleRef: apiGroup: rbac.authorization.k8s.io @@ -365,7 +365,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong namespace: default rules: @@ -429,7 +429,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong namespace: default roleRef: @@ -449,7 +449,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong-validation-webhook namespace: default spec: @@ -464,7 +464,7 @@ spec: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 --- apiVersion: v1 kind: Service @@ -474,7 +474,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong-manager namespace: default spec: @@ -502,7 +502,7 @@ metadata: app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" enable-metrics: "true" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong-proxy namespace: default spec: @@ -530,7 +530,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong namespace: default spec: @@ -554,7 +554,7 @@ spec: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 version: "3.7" spec: automountServiceAccountToken: false @@ -859,7 +859,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong-validations namespace: default webhooks: @@ -923,6 +923,7 @@ webhooks: name: chartsnap-kong-validation-webhook namespace: default failurePolicy: Ignore + matchPolicy: Equivalent name: validations.kong.konghq.com objectSelector: matchExpressions: diff --git a/charts/kong/ci/__snapshots__/test-enterprise-version-3.4-values.snap b/charts/kong/ci/__snapshots__/test-enterprise-version-3.4-values.snap index 80533d80b..fa14ded55 100644 --- a/charts/kong/ci/__snapshots__/test-enterprise-version-3.4-values.snap +++ b/charts/kong/ci/__snapshots__/test-enterprise-version-3.4-values.snap @@ -6,7 +6,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.4" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong namespace: default --- @@ -18,7 +18,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.4" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong-manager namespace: default spec: @@ -46,7 +46,7 @@ metadata: app.kubernetes.io/name: kong app.kubernetes.io/version: "3.4" enable-metrics: "true" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong-proxy namespace: default spec: @@ -74,7 +74,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.4" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong namespace: default spec: @@ -98,7 +98,7 @@ spec: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.4" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 version: "3.4" spec: automountServiceAccountToken: false diff --git a/charts/kong/ci/__snapshots__/test1-values.snap b/charts/kong/ci/__snapshots__/test1-values.snap index 75425a9af..2e7fdff03 100644 --- a/charts/kong/ci/__snapshots__/test1-values.snap +++ b/charts/kong/ci/__snapshots__/test1-values.snap @@ -6,7 +6,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong namespace: default --- @@ -21,7 +21,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong-validation-webhook-ca-keypair namespace: default type: kubernetes.io/tls @@ -37,7 +37,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong-validation-webhook-keypair namespace: default type: kubernetes.io/tls @@ -50,7 +50,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong rules: - apiGroups: @@ -346,7 +346,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong roleRef: apiGroup: rbac.authorization.k8s.io @@ -365,7 +365,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong namespace: default rules: @@ -429,7 +429,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong namespace: default roleRef: @@ -449,7 +449,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong-validation-webhook namespace: default spec: @@ -464,7 +464,7 @@ spec: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 --- apiVersion: v1 kind: Service @@ -474,7 +474,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong-manager namespace: default spec: @@ -502,7 +502,7 @@ metadata: app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" enable-metrics: "true" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong-proxy namespace: default spec: @@ -530,7 +530,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong namespace: default spec: @@ -554,7 +554,7 @@ spec: app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" environment: test - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 version: "3.7" spec: automountServiceAccountToken: false @@ -896,7 +896,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong namespace: default spec: @@ -922,7 +922,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong-proxy namespace: default spec: @@ -946,7 +946,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong-validations namespace: default webhooks: @@ -1010,6 +1010,7 @@ webhooks: name: chartsnap-kong-validation-webhook namespace: default failurePolicy: Ignore + matchPolicy: Equivalent name: validations.kong.konghq.com objectSelector: matchExpressions: diff --git a/charts/kong/ci/__snapshots__/test2-values.snap b/charts/kong/ci/__snapshots__/test2-values.snap index 21c189aa1..99f829722 100644 --- a/charts/kong/ci/__snapshots__/test2-values.snap +++ b/charts/kong/ci/__snapshots__/test2-values.snap @@ -6,7 +6,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong namespace: default --- @@ -36,7 +36,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong-validation-webhook-ca-keypair namespace: default type: kubernetes.io/tls @@ -52,7 +52,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong-validation-webhook-keypair namespace: default type: kubernetes.io/tls @@ -78,7 +78,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong-bash-wait-for-postgres namespace: default --- @@ -90,7 +90,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong rules: - apiGroups: @@ -165,7 +165,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong roleRef: apiGroup: rbac.authorization.k8s.io @@ -184,7 +184,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong namespace: default rules: @@ -248,7 +248,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong-default namespace: default rules: @@ -482,7 +482,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong namespace: default roleRef: @@ -502,7 +502,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong-default namespace: default roleRef: @@ -572,7 +572,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong-validation-webhook namespace: default spec: @@ -587,7 +587,7 @@ spec: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 --- apiVersion: v1 kind: Service @@ -597,7 +597,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong-manager namespace: default spec: @@ -625,7 +625,7 @@ metadata: app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" enable-metrics: "true" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong-proxy namespace: default spec: @@ -661,7 +661,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong namespace: default spec: @@ -690,7 +690,7 @@ spec: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 version: "3.7" spec: automountServiceAccountToken: false @@ -1303,7 +1303,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong-init-migrations namespace: default spec: @@ -1319,7 +1319,7 @@ spec: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: kong-init-migrations spec: automountServiceAccountToken: false @@ -1552,7 +1552,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong-proxy namespace: default spec: @@ -1576,7 +1576,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong-validations namespace: default webhooks: @@ -1640,6 +1640,7 @@ webhooks: name: chartsnap-kong-validation-webhook namespace: default failurePolicy: Ignore + matchPolicy: Equivalent name: validations.kong.konghq.com objectSelector: matchExpressions: @@ -1705,7 +1706,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong-post-upgrade-migrations namespace: default spec: @@ -1721,7 +1722,7 @@ spec: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: kong-post-upgrade-migrations spec: automountServiceAccountToken: false @@ -1960,7 +1961,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong-pre-upgrade-migrations namespace: default spec: @@ -1976,7 +1977,7 @@ spec: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: kong-pre-upgrade-migrations spec: automountServiceAccountToken: false diff --git a/charts/kong/ci/__snapshots__/test3-values.snap b/charts/kong/ci/__snapshots__/test3-values.snap index a56ec83fd..de43f8f43 100644 --- a/charts/kong/ci/__snapshots__/test3-values.snap +++ b/charts/kong/ci/__snapshots__/test3-values.snap @@ -6,7 +6,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong namespace: default --- @@ -28,7 +28,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong-custom-dbless-config namespace: default --- @@ -40,7 +40,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong-manager namespace: default spec: @@ -68,7 +68,7 @@ metadata: app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" enable-metrics: "true" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong-proxy namespace: default spec: @@ -96,7 +96,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong namespace: default spec: @@ -121,7 +121,7 @@ spec: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 version: "3.7" spec: automountServiceAccountToken: false diff --git a/charts/kong/ci/__snapshots__/test4-values.snap b/charts/kong/ci/__snapshots__/test4-values.snap index 2a28490fa..842aff3ce 100644 --- a/charts/kong/ci/__snapshots__/test4-values.snap +++ b/charts/kong/ci/__snapshots__/test4-values.snap @@ -6,7 +6,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong namespace: default --- @@ -28,7 +28,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong-custom-dbless-config namespace: default --- @@ -40,7 +40,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong-manager namespace: default spec: @@ -68,7 +68,7 @@ metadata: app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" enable-metrics: "true" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong-proxy namespace: default spec: @@ -104,7 +104,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong namespace: default spec: @@ -129,7 +129,7 @@ spec: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 version: "3.7" spec: automountServiceAccountToken: false @@ -367,7 +367,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong-proxy namespace: default spec: diff --git a/charts/kong/ci/__snapshots__/test5-values.snap b/charts/kong/ci/__snapshots__/test5-values.snap index 258e1c9e4..6754f2c42 100644 --- a/charts/kong/ci/__snapshots__/test5-values.snap +++ b/charts/kong/ci/__snapshots__/test5-values.snap @@ -6,7 +6,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong namespace: default --- @@ -36,7 +36,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong-validation-webhook-ca-keypair namespace: default type: kubernetes.io/tls @@ -52,7 +52,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong-validation-webhook-keypair namespace: default type: kubernetes.io/tls @@ -71,7 +71,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong-bash-wait-for-postgres namespace: default --- @@ -83,7 +83,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong rules: - apiGroups: @@ -379,7 +379,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong roleRef: apiGroup: rbac.authorization.k8s.io @@ -398,7 +398,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong namespace: default rules: @@ -462,7 +462,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong namespace: default roleRef: @@ -532,7 +532,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong-validation-webhook namespace: default spec: @@ -547,7 +547,7 @@ spec: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 --- apiVersion: v1 kind: Service @@ -557,7 +557,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong-manager namespace: default spec: @@ -585,7 +585,7 @@ metadata: app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" enable-metrics: "true" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong-proxy namespace: default spec: @@ -613,7 +613,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong namespace: default spec: @@ -642,7 +642,7 @@ spec: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 version: "3.7" spec: automountServiceAccountToken: false @@ -1226,7 +1226,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong-init-migrations namespace: default spec: @@ -1242,7 +1242,7 @@ spec: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: kong-init-migrations spec: automountServiceAccountToken: false @@ -1460,7 +1460,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong-proxy namespace: default spec: @@ -1484,7 +1484,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong-validations namespace: default webhooks: @@ -1548,6 +1548,7 @@ webhooks: name: chartsnap-kong-validation-webhook namespace: default failurePolicy: Ignore + matchPolicy: Equivalent name: validations.kong.konghq.com objectSelector: matchExpressions: @@ -1612,7 +1613,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong-post-upgrade-migrations namespace: default spec: @@ -1628,7 +1629,7 @@ spec: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: kong-post-upgrade-migrations spec: automountServiceAccountToken: false @@ -1852,7 +1853,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: chartsnap-kong-pre-upgrade-migrations namespace: default spec: @@ -1868,7 +1869,7 @@ spec: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: "3.7" - helm.sh/chart: kong-2.41.1 + helm.sh/chart: kong-2.42.0 name: kong-pre-upgrade-migrations spec: automountServiceAccountToken: false diff --git a/charts/kong/ci/admission-webhook-configuration.yaml b/charts/kong/ci/admission-webhook-configuration.yaml new file mode 100644 index 000000000..28e849944 --- /dev/null +++ b/charts/kong/ci/admission-webhook-configuration.yaml @@ -0,0 +1,24 @@ +ingressController: + enabled: true + admissionWebhook: + enabled: true + timeoutSeconds: 5 + filterSecrets: true + objectSelector: + matchExpressions: + - key: owner + operator: NotIn + values: + - helm + - key: infra + operator: In + values: + - cloud + matchPolicy: Exact + matchConditions: + - name: 'exclude-leases' # Each match condition must have a unique name + expression: '!(request.resource.group == "coordination.k8s.io" && request.resource.resource == "leases")' # Match non-lease resources. + - name: 'exclude-kubelet-requests' + expression: '!("system:nodes" in request.userInfo.groups)' # Match requests made by non-node users. + - name: 'rbac' # Skip RBAC requests, which are handled by the second webhook. + expression: 'request.resource.group != "rbac.authorization.k8s.io"' diff --git a/charts/kong/templates/admission-webhook.yaml b/charts/kong/templates/admission-webhook.yaml index 1f121eff0..f7fcaef82 100644 --- a/charts/kong/templates/admission-webhook.yaml +++ b/charts/kong/templates/admission-webhook.yaml @@ -55,7 +55,7 @@ webhooks: name: {{ template "kong.service.validationWebhook" . }} namespace: {{ template "kong.namespace" . }} failurePolicy: {{ .Values.ingressController.admissionWebhook.failurePolicy }} - matchPolicy: Equivalent + matchPolicy: {{ .Values.ingressController.admissionWebhook.matchPolicy }} name: secrets.credentials.validation.ingress-controller.konghq.com {{- with .Values.ingressController.admissionWebhook.namespaceSelector }} namespaceSelector: @@ -93,7 +93,7 @@ webhooks: name: {{ template "kong.service.validationWebhook" . }} namespace: {{ template "kong.namespace" . }} failurePolicy: {{ .Values.ingressController.admissionWebhook.failurePolicy }} - matchPolicy: Equivalent + matchPolicy: {{ .Values.ingressController.admissionWebhook.matchPolicy }} name: secrets.plugins.validation.ingress-controller.konghq.com {{- with .Values.ingressController.admissionWebhook.namespaceSelector }} namespaceSelector: @@ -127,19 +127,22 @@ webhooks: - secrets sideEffects: None - name: validations.kong.konghq.com + matchPolicy: {{ .Values.ingressController.admissionWebhook.matchPolicy }} {{- with .Values.ingressController.admissionWebhook.namespaceSelector }} namespaceSelector: {{- toYaml . | nindent 4 }} {{- end }} + {{- with .Values.ingressController.admissionWebhook.matchConditions }} + matchConditions: + {{- toYaml . | nindent 4 }} + {{- end }} + {{- with .Values.ingressController.admissionWebhook.objectSelector }} + objectSelector: + {{- toYaml . | nindent 4 }} + {{- end }} {{- with .Values.ingressController.admissionWebhook.timeoutSeconds }} timeoutSeconds: {{ . }} {{- end }} - objectSelector: - matchExpressions: - - key: owner - operator: NotIn - values: - - helm failurePolicy: {{ .Values.ingressController.admissionWebhook.failurePolicy }} sideEffects: None admissionReviewVersions: ["v1beta1"] diff --git a/charts/kong/values.yaml b/charts/kong/values.yaml index d7c67e6ea..cc8a8b241 100644 --- a/charts/kong/values.yaml +++ b/charts/kong/values.yaml @@ -584,6 +584,7 @@ ingressController: envFrom: [] admissionWebhook: + matchPolicy: Equivalent enabled: true filterSecrets: false failurePolicy: Ignore @@ -591,6 +592,13 @@ ingressController: certificate: provided: false namespaceSelector: {} + # ObjectSelector specifies which objects to match against validations.kong.konghq.com webhook webhook + objectSelector: + matchExpressions: + - key: owner + operator: NotIn + values: + - helm # Specifiy the secretName when the certificate is provided via a TLS secret # secretName: "" # Specifiy the CA bundle of the provided certificate.