feat: By default fail to create a Pod if it's clone configuration is …

…invalid
riotkit-org · Jun 24, 2022 · f076573 · f076573
1 parent e6d0be7
commit f076573
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 1 deletion.
diff --git a/helm/git-clone-operator/templates/mutatingwebhookconfiguration.yaml b/helm/git-clone-operator/templates/mutatingwebhookconfiguration.yaml
@@ -13,7 +13,7 @@ metadata:
         {{- include "git-clone-operator.labels" . | nindent 8 }}
 webhooks:
     - name: {{ include "git-clone-operator.fullname" . }}.{{ .Release.Namespace }}.svc.cluster.local
-      failurePolicy: Ignore  # do not block whole cluster
+      failurePolicy: {{ .Value.webhook.failurePolicy }}
       {{- if .Values.onlyLabelledNamespaces }}
       namespaceSelector:
           matchLabels:

diff --git a/helm/git-clone-operator/values.yaml b/helm/git-clone-operator/values.yaml
@@ -19,6 +19,9 @@ podSecurityContext:
     fsGroup: 65161
     runAsNonRoot: true
 
+webhook:
+    failurePolicy: Fail
+
 serviceAccount:
     create: true
     name: git-clone-operator-sa