From dadedefa8285a0ea5e042d5f39744f89bdb54078 Mon Sep 17 00:00:00 2001
From: ci-bot <ci-bot@kubesphere.io>
Date: Fri, 1 Mar 2024 10:58:12 +0000
Subject: [PATCH] update ks-core helm chart

---
 .../crds/kubesphere.io_extensionversions.yaml |  2 ++
 src/test/ks-core/templates/globalroles.yaml   |  7 ++++
 src/test/ks-core/templates/webhook.yaml       | 32 +++++++++++++++++++
 3 files changed, 41 insertions(+)

diff --git a/src/test/ks-core/crds/kubesphere.io_extensionversions.yaml b/src/test/ks-core/crds/kubesphere.io_extensionversions.yaml
index 1fa7c4c5..29493883 100644
--- a/src/test/ks-core/crds/kubesphere.io_extensionversions.yaml
+++ b/src/test/ks-core/crds/kubesphere.io_extensionversions.yaml
@@ -82,6 +82,8 @@ spec:
                 additionalProperties:
                   type: string
                 type: object
+              docs:
+                type: string
               externalDependencies:
                 description: ExternalDependencies
                 items:
diff --git a/src/test/ks-core/templates/globalroles.yaml b/src/test/ks-core/templates/globalroles.yaml
index 8b064670..aca0109c 100644
--- a/src/test/ks-core/templates/globalroles.yaml
+++ b/src/test/ks-core/templates/globalroles.yaml
@@ -129,6 +129,13 @@ rules:
     verbs:
       - get
       - list
+  - apiGroups:
+      - license.kubesphere.io
+    resources:
+      - licenses
+    verbs:
+      - get
+      - list
   - apiGroups:
       - cluster.kubesphere.io
     resources:
diff --git a/src/test/ks-core/templates/webhook.yaml b/src/test/ks-core/templates/webhook.yaml
index a9021abd..0fd1e180 100644
--- a/src/test/ks-core/templates/webhook.yaml
+++ b/src/test/ks-core/templates/webhook.yaml
@@ -317,6 +317,38 @@ webhooks:
 
 ---
 apiVersion: admissionregistration.k8s.io/v1
+kind: ValidatingWebhookConfiguration
+metadata:
+  name: license.kubesphere.io
+webhooks:
+  - admissionReviewVersions:
+      - v1
+    clientConfig:
+      caBundle: {{ b64enc $ca.Cert | quote }}
+      service:
+        name: ks-controller-manager
+        namespace: kubesphere-system
+        path: /license-cluster-checker
+        port: 443
+    name: license-cluster-checker.kubesphere.io
+    failurePolicy: Ignore
+    matchPolicy: Exact
+    namespaceSelector: {}
+    objectSelector: {}
+    rules:
+      - apiGroups:
+          - cluster.kubesphere.io
+        apiVersions:
+          - v1alpha1
+        operations:
+          - CREATE
+        resources:
+          - clusters
+        scope: '*'
+    sideEffects: None
+    timeoutSeconds: 30
+---
+apiVersion: admissionregistration.k8s.io/v1
 kind: MutatingWebhookConfiguration
 metadata:
   name: defaulter.config.kubesphere.io