From aa94706e361dc783e8d775c43937fa5b5b764882 Mon Sep 17 00:00:00 2001
From: Rita Zhang <rita.z.zhang@gmail.com>
Date: Thu, 11 Jan 2024 14:59:08 -0800
Subject: [PATCH] update controller gen and manifests

Signed-off-by: Rita Zhang <rita.z.zhang@gmail.com>
---
 .../overlays/dev/manager_image_patch.yaml-e   | 45 +++++++++++++++++++
 ...ainttemplate-customresourcedefinition.yaml |  2 +-
 .../provider-customresourcedefinition.yaml    |  2 +-
 manifest_staging/deploy/gatekeeper.yaml       |  4 +-
 4 files changed, 49 insertions(+), 4 deletions(-)
 create mode 100644 config/overlays/dev/manager_image_patch.yaml-e

diff --git a/config/overlays/dev/manager_image_patch.yaml-e b/config/overlays/dev/manager_image_patch.yaml-e
new file mode 100644
index 00000000000..744ec702143
--- /dev/null
+++ b/config/overlays/dev/manager_image_patch.yaml-e
@@ -0,0 +1,45 @@
+apiVersion: apps/v1 
+kind: Deployment 
+metadata: 
+  name: controller-manager 
+  namespace: system 
+spec: 
+  template: 
+    spec: 
+      containers: 
+      - image: <your image file> 
+        name: manager 
+        args: 
+        - --port=8443 
+        - --logtostderr 
+        - --emit-admission-events 
+        - --admission-events-involved-namespace 
+        - --exempt-namespace=gatekeeper-system 
+        - --operation=webhook 
+        - --operation=mutation-webhook 
+        - --disable-opa-builtin=http.send 
+        - --log-mutations 
+        - --mutation-annotations 
+        - --vap-enforcement=GATEKEEPER_DEFAULT 
+        - --validate-template-rego=false 
+        - --experimental-enable-k8s-native-validation 
+--- 
+apiVersion: apps/v1 
+kind: Deployment 
+metadata: 
+  name: audit 
+  namespace: system 
+spec: 
+  template: 
+    spec: 
+      containers: 
+      - image: <your image file> 
+        name: manager 
+        args: 
+        - --emit-audit-events 
+        - --audit-events-involved-namespace 
+        - --operation=audit 
+        - --operation=status 
+        - --operation=mutation-status 
+        - --audit-chunk-size=500 
+        - --logtostderr
diff --git a/manifest_staging/charts/gatekeeper/crds/constrainttemplate-customresourcedefinition.yaml b/manifest_staging/charts/gatekeeper/crds/constrainttemplate-customresourcedefinition.yaml
index 737e3aff15b..afc89d03bdf 100644
--- a/manifest_staging/charts/gatekeeper/crds/constrainttemplate-customresourcedefinition.yaml
+++ b/manifest_staging/charts/gatekeeper/crds/constrainttemplate-customresourcedefinition.yaml
@@ -2,7 +2,7 @@ apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
 metadata:
   annotations:
-    controller-gen.kubebuilder.io/version: v0.11.3
+    controller-gen.kubebuilder.io/version: v0.10.0
   labels:
     gatekeeper.sh/system: "yes"
   name: constrainttemplates.templates.gatekeeper.sh
diff --git a/manifest_staging/charts/gatekeeper/crds/provider-customresourcedefinition.yaml b/manifest_staging/charts/gatekeeper/crds/provider-customresourcedefinition.yaml
index 95e66a8b8aa..177afbb6780 100644
--- a/manifest_staging/charts/gatekeeper/crds/provider-customresourcedefinition.yaml
+++ b/manifest_staging/charts/gatekeeper/crds/provider-customresourcedefinition.yaml
@@ -2,7 +2,7 @@ apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
 metadata:
   annotations:
-    controller-gen.kubebuilder.io/version: v0.11.3
+    controller-gen.kubebuilder.io/version: v0.10.0
   labels:
     gatekeeper.sh/system: "yes"
   name: providers.externaldata.gatekeeper.sh
diff --git a/manifest_staging/deploy/gatekeeper.yaml b/manifest_staging/deploy/gatekeeper.yaml
index 1410a8caaa2..b5154a0edf8 100644
--- a/manifest_staging/deploy/gatekeeper.yaml
+++ b/manifest_staging/deploy/gatekeeper.yaml
@@ -1927,7 +1927,7 @@ apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
 metadata:
   annotations:
-    controller-gen.kubebuilder.io/version: v0.11.3
+    controller-gen.kubebuilder.io/version: v0.10.0
   labels:
     gatekeeper.sh/system: "yes"
   name: constrainttemplates.templates.gatekeeper.sh
@@ -3296,7 +3296,7 @@ apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
 metadata:
   annotations:
-    controller-gen.kubebuilder.io/version: v0.11.3
+    controller-gen.kubebuilder.io/version: v0.10.0
   labels:
     gatekeeper.sh/system: "yes"
   name: providers.externaldata.gatekeeper.sh