41 lines
1.1 KiB
YAML
41 lines
1.1 KiB
YAML
 
|
apiVersion: kustomize.config.k8s.io/v1beta1
|
||
|
|
kind: Kustomization
|
||
|
|
metadata:
|
||
|
|
name: tekton-pipelines
|
||
|
|
|
||
|
|
# Tekton release includes CRDs, RBAC, controllers, webhook
|
||
|
|
# We use a remote base to stay on the latest stable release
|
||
|
|
bases:
|
||
|
|
- https://storage.googleapis.com/tekton-releases/pipeline/latest/release.yaml?ref=main
|
||
|
|
|
||
|
|
# Add our local namespace override
|
||
|
|
resources:
|
||
|
|
- namespace.yaml
|
||
|
|
|
||
|
|
# Common labels for all resources
|
||
|
|
commonLabels:
|
||
|
|
app: tekton
|
||
|
|
component: pipelines
|
||
|
|
managed-by: argocd
|
||
|
|
|
||
|
|
# Don't transform namespace - let the release define its own
|
||
|
|
# namespace: tekton-pipelines
|
||
|
|
|
||
|
|
patches:
|
||
|
|
# Ensure webhook is properly configured for validation
|
||
|
|
- target:
|
||
|
|
kind: ValidatingWebhookConfiguration
|
||
|
|
name: validation.webhook.pipeline.tekton.dev
|
||
|
|
patch: |-
|
||
|
|
- op: replace
|
||
|
|
path: /webhooks/0/failurePolicy
|
||
|
|
value: Fail
|
||
|
|
# Ensure mutation webhook is properly configured
|
||
|
|
- target:
|
||
|
|
kind: MutatingWebhookConfiguration
|
||
|
|
name: webhook.pipeline.tekton.dev
|
||
|
|
patch: |-
|
||
|
|
- op: replace
|
||
|
|
path: /webhooks/0/failurePolicy
|
||
|
|
value: Fail
|