新增learn-kubernetes（https://github.com/yyong-brs/learn-kubernetes）相关文件

learn/learn-kubernetes-master/kiamol/ch16/admission-webhook/helm/mutating-webhook/.helmignore

@@ -0,0 +1,23 @@
+# Patterns to ignore when building packages.
+# This supports shell glob matching, relative path matching, and
+# negation (prefixed with !). Only one pattern per line.
+.DS_Store
+# Common VCS dirs
+.git/
+.gitignore
+.bzr/
+.bzrignore
+.hg/
+.hgignore
+.svn/
+# Common backup files
+*.swp
+*.bak
+*.tmp
+*.orig
+*~
+# Various IDEs
+.project
+.idea/
+*.tmproj
+.vscode/

learn/learn-kubernetes-master/kiamol/ch16/admission-webhook/helm/mutating-webhook/Chart.yaml

@@ -0,0 +1,6 @@
+apiVersion: v2
+name: mutating-webhook
+description: Mutating webhook configuration
+type: application
+version: 1.0.0
+appVersion: 1.0.0

learn/learn-kubernetes-master/kiamol/ch16/admission-webhook/helm/mutating-webhook/templates/mutatingWebhookConfiguration.yaml

@@ -0,0 +1,19 @@
+apiVersion: admissionregistration.k8s.io/v1beta1
+kind: MutatingWebhookConfiguration
+metadata:
+  name: nonrootpolicy
+  labels:
+    kiamol: ch16
+webhooks:
+  - name: nonrootpolicy.kiamol.net
+    rules:
+      - operations: [ "CREATE", "UPDATE" ]
+        apiGroups: [""]
+        apiVersions: ["v1"]
+        resources: ["pods"]
+    clientConfig:
+      service:
+        name: admission-webhook
+        namespace: default
+        path: "/mutate"
+      caBundle: {{ .Values.caBundle }}

learn/learn-kubernetes-master/kiamol/ch16/admission-webhook/helm/mutating-webhook/values.yaml

@@ -0,0 +1,2 @@
+# base-64 encoded CA cert for the webhook server
+caBundle: TODO

learn/learn-kubernetes-master/kiamol/ch16/admission-webhook/helm/validating-webhook/.helmignore

@@ -0,0 +1,23 @@
+# Patterns to ignore when building packages.
+# This supports shell glob matching, relative path matching, and
+# negation (prefixed with !). Only one pattern per line.
+.DS_Store
+# Common VCS dirs
+.git/
+.gitignore
+.bzr/
+.bzrignore
+.hg/
+.hgignore
+.svn/
+# Common backup files
+*.swp
+*.bak
+*.tmp
+*.orig
+*~
+# Various IDEs
+.project
+.idea/
+*.tmproj
+.vscode/

learn/learn-kubernetes-master/kiamol/ch16/admission-webhook/helm/validating-webhook/Chart.yaml

@@ -0,0 +1,6 @@
+apiVersion: v2
+name: validating-webhook
+description: Validating webhook configuration
+type: application
+version: 1.0.0
+appVersion: 1.0.0

learn/learn-kubernetes-master/kiamol/ch16/admission-webhook/helm/validating-webhook/templates/validatingWebhookConfiguration.yaml

@@ -0,0 +1,19 @@
+apiVersion: admissionregistration.k8s.io/v1beta1
+kind: ValidatingWebhookConfiguration
+metadata:
+  name: servicetokenpolicy
+  labels:
+    kiamol: ch16
+webhooks:
+  - name: servicetokenpolicy.kiamol.net
+    rules:
+      - operations: [ "CREATE", "UPDATE" ]
+        apiGroups: [""]
+        apiVersions: ["v1"]
+        resources: ["pods"]
+    clientConfig:
+      service:
+        name: admission-webhook
+        namespace: default
+        path: "/validate"
+      caBundle: {{ .Values.caBundle }}

learn/learn-kubernetes-master/kiamol/ch16/admission-webhook/helm/validating-webhook/values.yaml

@@ -0,0 +1,2 @@
+# base-64 encoded CA cert for the webhook server
+caBundle: TODO