Merge pull request #92 from mozilla-iam/k8s-fixes

Adds webhook validation to ingress controller
mozilla-iam · Dec 20, 2023 · a13d09a · a13d09a
2 parents 4ece205 + c29cf7f
commit a13d09a
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/k8s/templates/ingress-controller.yaml b/k8s/templates/ingress-controller.yaml
@@ -128,13 +128,15 @@ spec:
             - --configmap=$(POD_NAMESPACE)/nginx-configuration
             - --publish-service=$(POD_NAMESPACE)/ingress-nginx
             - --annotations-prefix=nginx.ingress.kubernetes.io
+            - --validating-webhook=:8443
+            - --validating-webhook-certificate=/usr/local/certificates/cert
+            - --validating-webhook-key=/usr/local/certificates/key
           securityContext:
             capabilities:
                 drop:
                 - ALL
                 add:
                 - NET_BIND_SERVICE
-            # www-data -> 33
             runAsUser: 101
           env:
             - name: POD_NAME