upgrade admission webhook (#287)

README.md

@@ -174,13 +174,13 @@ Apply the version change to the cluster CR:
 $ kubectl apply -f config/samples/apps_v1alpha1_nebulacluster.yaml
 ```
 
-Wait few minutes. The container image version should be updated to v3.5.x:
+Wait few minutes. The container image version should be updated to v3.6.x:
 
 ```bash
 $ kubectl get pods -l app.kubernetes.io/cluster=nebula  -o jsonpath="{.items[*].spec.containers[*].image}" |tr -s '[[:space:]]' '\n' |sort |uniq -c
-      1 vesoft/nebula-graphd:v3.5.x
-      1 vesoft/nebula-metad:v3.5.x
-      3 vesoft/nebula-storaged:v3.5.x
+      1 vesoft/nebula-graphd:v3.6.x
+      1 vesoft/nebula-metad:v3.6.x
+      3 vesoft/nebula-storaged:v3.6.x
 ```
 
 **Warning:**

apis/go.mod

@@ -1,14 +1,14 @@
 module github.com/vesoft-inc/nebula-operator/apis
 
-go 1.19
+go 1.20
 
 require (
 	github.com/openkruise/kruise-api v1.3.0
 	github.com/vesoft-inc/nebula-go/v3 v3.6.0
-	k8s.io/api v0.26.5
-	k8s.io/apimachinery v0.26.5
+	k8s.io/api v0.27.4
+	k8s.io/apimachinery v0.27.4
 	k8s.io/utils v0.0.0-20230209194617-a36077c30491
-	sigs.k8s.io/controller-runtime v0.14.6
+	sigs.k8s.io/controller-runtime v0.15.2
 )
 
 require (

apis/go.sum

@@ -4,34 +4,37 @@ github.com/davecgh/go-spew v1.1.1/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSs
 github.com/go-logr/logr v1.2.0/go.mod h1:jdQByPbusPIv2/zmleS9BjJVeZ6kBagPoEUsqbVz/1A=
 github.com/go-logr/logr v1.2.4 h1:g01GSCwiDw2xSZfjJ2/T9M+S6pFdcNtFYsp+Y43HYDQ=
 github.com/go-logr/logr v1.2.4/go.mod h1:jdQByPbusPIv2/zmleS9BjJVeZ6kBagPoEUsqbVz/1A=
+github.com/go-task/slim-sprig v0.0.0-20230315185526-52ccab3ef572 h1:tfuBGBXKqDEevZMzYi5KSi8KkcZtzBcTgAUUtapy0OI=
 github.com/gogo/protobuf v1.3.2 h1:Ov1cvc58UF3b5XjBnZv7+opcTcQFZebYjWzi34vdm4Q=
 github.com/gogo/protobuf v1.3.2/go.mod h1:P1XiOD3dCwIKUDQYPy72D8LYyHL2YPYrpS2s69NZV8Q=
 github.com/google/go-cmp v0.5.9 h1:O2Tfq5qg4qc4AmwVlvv0oLiVAGB7enBSJ2x2DqQFi38=
 github.com/google/gofuzz v1.0.0/go.mod h1:dBl0BpW6vV/+mYPU4Po3pmUjxk6FQPldtuIdl/M65Eg=
 github.com/google/gofuzz v1.1.0 h1:Hsa8mG0dQ46ij8Sl2AYJDUv1oA9/d6Vk+3LG99Oe02g=
 github.com/google/gofuzz v1.1.0/go.mod h1:dBl0BpW6vV/+mYPU4Po3pmUjxk6FQPldtuIdl/M65Eg=
+github.com/google/pprof v0.0.0-20210720184732-4bb14d4b1be1 h1:K6RDEckDVWvDI9JAJYCmNdQXq6neHJOYx3V6jnqNEec=
 github.com/json-iterator/go v1.1.12 h1:PV8peI4a0ysnczrg+LtxykD8LfKY9ML6u2jnxaEnrnM=
 github.com/json-iterator/go v1.1.12/go.mod h1:e30LSqwooZae/UwlEbR2852Gd8hjQvJoHmT4TnhNGBo=
 github.com/kisielk/errcheck v1.5.0/go.mod h1:pFxgyoBC7bSaBwPgfKdkLd5X25qrDl4LWUI2bnpBCr8=
 github.com/kisielk/gotool v1.0.0/go.mod h1:XhKaO+MFFWcvkIS/tQcRk01m1F5IRFswLeQ+oQHNcck=
+github.com/kr/pretty v0.3.0 h1:WgNl7dwNpEZ6jJ9k1snq4pZsg7DOEN8hP9Xw0Tsjwk0=
 github.com/kr/text v0.2.0 h1:5Nx0Ya0ZqY2ygV366QzturHI13Jq95ApcVaJBhpS+AY=
 github.com/modern-go/concurrent v0.0.0-20180228061459-e0a39a4cb421/go.mod h1:6dJC0mAP4ikYIbvyc7fijjWJddQyLn8Ig3JB5CqoB9Q=
 github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd h1:TRLaZ9cD/w8PVh93nsPXa1VrQ6jlwL5oN8l14QlcNfg=
 github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd/go.mod h1:6dJC0mAP4ikYIbvyc7fijjWJddQyLn8Ig3JB5CqoB9Q=
 github.com/modern-go/reflect2 v1.0.2 h1:xBagoLtFs94CBntxluKeaWgTMpvLxC4ur3nMaC9Gz0M=
 github.com/modern-go/reflect2 v1.0.2/go.mod h1:yWuevngMOJpCy52FWWMvUC8ws7m/LJsjYzDa0/r8luk=
-github.com/niemeyer/pretty v0.0.0-20200227124842-a10e7caefd8e h1:fD57ERR4JtEqsWbfPhv4DMiApHyliiK5xCTNVSPiaAs=
-github.com/onsi/ginkgo/v2 v2.6.0 h1:9t9b9vRUbFq3C4qKFCGkVuq/fIHji802N1nrtkh1mNc=
-github.com/onsi/gomega v1.24.1 h1:KORJXNNTzJXzu4ScJWssJfJMnJ+2QJqhoQSRwNlze9E=
+github.com/onsi/ginkgo/v2 v2.9.5 h1:+6Hr4uxzP4XIUyAkg61dWBw8lb/gc4/X5luuxN/EC+Q=
+github.com/onsi/gomega v1.27.7 h1:fVih9JD6ogIiHUN6ePK7HJidyEDpWGVB5mzM7cWNXoU=
 github.com/openkruise/kruise-api v1.3.0 h1:yfEy64uXgSuX/5RwePLbwUK/uX8RRM8fHJkccel5ZIQ=
 github.com/openkruise/kruise-api v1.3.0/go.mod h1:9ZX+ycdHKNzcA5ezAf35xOa2Mwfa2BYagWr0lKgi5dU=
 github.com/pmezard/go-difflib v1.0.0 h1:4DBwDE0NGyQoBHbLQYPwSUPoCMWR5BEzIk/f1lZbAQM=
 github.com/pmezard/go-difflib v1.0.0/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4=
+github.com/rogpeppe/go-internal v1.11.0 h1:cWPaGQEPrBb5/AsnsZesgZZ9yb1OQ+GOISoDNXVBh4M=
 github.com/spf13/pflag v1.0.5 h1:iy+VFUOCP1a+8yFto/drg2CJ5u0yRoB7fZw3DKv/JXA=
 github.com/stretchr/objx v0.1.0/go.mod h1:HFkY916IF+rwdDfMAkV7OtwuqBVzrE8GR6GFx+wExME=
 github.com/stretchr/testify v1.3.0/go.mod h1:M5WIy9Dh21IEIfnGCwXGc5bZfKNJtfHm1UVUgZn+9EI=
 github.com/stretchr/testify v1.7.0/go.mod h1:6Fq8oRcR53rry900zMqJjRRixrwX3KX962/h/Wwjteg=
-github.com/stretchr/testify v1.8.0 h1:pSgiaMZlXftHpm5L7V1+rVB+AZJydKsMxsQBIJw4PKk=
+github.com/stretchr/testify v1.8.1 h1:w7B6lhMri9wdJUVmEZPGGhZzrYTPvgJArz7wNPgYKsk=
 github.com/vesoft-inc/fbthrift v0.0.0-20230214024353-fa2f34755b28 h1:gpoPCGeOEuk/TnoY9nLVK1FoBM5ie7zY3BPVG8q43ME=
 github.com/vesoft-inc/fbthrift v0.0.0-20230214024353-fa2f34755b28/go.mod h1:xu7e9za8StcJhBZmCDwK1Hyv4/Y0xFsjS+uqp10ECJg=
 github.com/vesoft-inc/nebula-go/v3 v3.6.0 h1:ahwkfkHl9O8G07mhGi0vmnXBCcTTgZjAdPYyjQkysWI=
@@ -82,29 +85,30 @@ golang.org/x/tools v0.0.0-20191119224855-298f0cb1881e/go.mod h1:b+2E5dAYhXwXZwtn
 golang.org/x/tools v0.0.0-20200619180055-7c47624df98f/go.mod h1:EkVYQZoAsY45+roYkvgYkIh4xh/qjgUK9TdY2XT94GE=
 golang.org/x/tools v0.0.0-20210106214847-113979e3529a/go.mod h1:emZCQorbCU4vsT4fOWvOPXz4eW1wZW4PmDk9uLelYpA=
 golang.org/x/tools v0.1.12/go.mod h1:hNGJHUnrk76NpqgfD5Aqm5Crs+Hm0VOH/i9J2+nxYbc=
+golang.org/x/tools v0.9.1 h1:8WMNJAz3zrtPmnYC7ISf5dEn3MT0gY7jBJfw27yrrLo=
 golang.org/x/xerrors v0.0.0-20190717185122-a985d3407aa7/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
 golang.org/x/xerrors v0.0.0-20191011141410-1b5146add898/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
 golang.org/x/xerrors v0.0.0-20191204190536-9bdfabe68543/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
 golang.org/x/xerrors v0.0.0-20200804184101-5ec99f83aff1/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
 gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
-gopkg.in/check.v1 v1.0.0-20200227125254-8fa46927fb4f h1:BLraFXnmrev5lT+xlilqcH8XK9/i0At2xKjWk4p6zsU=
+gopkg.in/check.v1 v1.0.0-20201130134442-10cb98267c6c h1:Hei/4ADfdWqJk1ZMxUNpqntNwaWcugrBjAiHlqqRiVk=
 gopkg.in/inf.v0 v0.9.1 h1:73M5CoZyi3ZLMOyDlQh031Cx6N9NDJ2Vvfl76EDAgDc=
 gopkg.in/inf.v0 v0.9.1/go.mod h1:cWUDdTG/fYaXco+Dcufb5Vnc6Gp2YChqWtbxRZE0mXw=
 gopkg.in/yaml.v2 v2.2.8/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI=
 gopkg.in/yaml.v2 v2.4.0 h1:D8xgwECY7CYvx+Y2n4sBz93Jn9JRvxdiyyo8CTfuKaY=
 gopkg.in/yaml.v2 v2.4.0/go.mod h1:RDklbk79AGWmwhnvt/jBztapEOGDOx6ZbXqjP6csGnQ=
 gopkg.in/yaml.v3 v3.0.0-20200313102051-9f266ea9e77c/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
 gopkg.in/yaml.v3 v3.0.1 h1:fxVm/GzAzEWqLHuvctI91KS9hhNmmWOoWu0XTYJS7CA=
-k8s.io/api v0.26.5 h1:Npao/+sMSng6nkEcNydgH3BNo4s5YoBg7iw35HM7Hcw=
-k8s.io/api v0.26.5/go.mod h1:O7ICW7lj6+ZQQQ3cxekgCoW+fnGo5kWT0nTHkLZ5grc=
-k8s.io/apimachinery v0.26.5 h1:hTQVhJao2piX7vSgCn4Lwd6E0o/+TJIH4NqRf+q4EmE=
-k8s.io/apimachinery v0.26.5/go.mod h1:HUvk6wrOP4v22AIYqeCGSQ6xWCHo41J9d6psb3temAg=
+k8s.io/api v0.27.4 h1:0pCo/AN9hONazBKlNUdhQymmnfLRbSZjd5H5H3f0bSs=
+k8s.io/api v0.27.4/go.mod h1:O3smaaX15NfxjzILfiln1D8Z3+gEYpjEpiNA/1EVK1Y=
+k8s.io/apimachinery v0.27.4 h1:CdxflD4AF61yewuid0fLl6bM4a3q04jWel0IlP+aYjs=
+k8s.io/apimachinery v0.27.4/go.mod h1:XNfZ6xklnMCOGGFNqXG7bUrQCoR04dh/E7FprV6pb+E=
 k8s.io/klog/v2 v2.90.1 h1:m4bYOKall2MmOiRaR1J+We67Do7vm9KiQVlT96lnHUw=
 k8s.io/klog/v2 v2.90.1/go.mod h1:y1WjHnz7Dj687irZUWR/WLkLc5N1YHtjLdmgWjndZn0=
 k8s.io/utils v0.0.0-20230209194617-a36077c30491 h1:r0BAOLElQnnFhE/ApUsg3iHdVYYPBjNSSOMowRZxxsY=
 k8s.io/utils v0.0.0-20230209194617-a36077c30491/go.mod h1:OLgZIPagt7ERELqWJFomSt595RzquPNLL48iOWgYOg0=
-sigs.k8s.io/controller-runtime v0.14.6 h1:oxstGVvXGNnMvY7TAESYk+lzr6S3V5VFxQ6d92KcwQA=
-sigs.k8s.io/controller-runtime v0.14.6/go.mod h1:WqIdsAY6JBsjfc/CqO0CORmNtoCtE4S6qbPc9s68h+0=
+sigs.k8s.io/controller-runtime v0.15.2 h1:9V7b7SDQSJ08IIsJ6CY1CE85Okhp87dyTMNDG0FS7f4=
+sigs.k8s.io/controller-runtime v0.15.2/go.mod h1:7ngYvp1MLT+9GeZ+6lH3LOlcHkp/+tzA/fmHa4iq9kk=
 sigs.k8s.io/json v0.0.0-20221116044647-bc3834ca7abd h1:EDPBXCAspyGV4jQlpZSudPeMmr1bNJefnuqLsRAsHZo=
 sigs.k8s.io/json v0.0.0-20221116044647-bc3834ca7abd/go.mod h1:B8JuhiUyNFVKdsE8h686QcCxMaH6HrOAZj4vswFpcB0=
 sigs.k8s.io/structured-merge-diff/v4 v4.2.3 h1:PRbqxJClWWYMNV1dhaG4NsibJbArud9kFxnAMREiWFE=

charts/nebula-cluster/Chart.yaml

@@ -1,8 +1,8 @@
 apiVersion: v2
 name: nebula-cluster
 description: Nebula Cluster Helm chart for Kubernetes
-version: 1.5.0
-appVersion: 1.5.0
+version: 1.6.0
+appVersion: 1.6.0
 home: https://nebula-graph.io
 sources:
 - https://github.com/vesoft-inc/nebula

charts/nebula-operator/Chart.yaml

@@ -1,8 +1,8 @@
 apiVersion: v2
 name: nebula-operator
 description: Nebula Operator Helm chart for Kubernetes
-version: 1.5.0
-appVersion: 1.5.0
+version: 1.6.0
+appVersion: 1.6.0
 home: https://nebula-graph.io
 sources:
 - https://github.com/vesoft-inc/nebula-operator

charts/nebula-operator/templates/admission-webhook-certificate.yaml

@@ -1,4 +1,3 @@
-{{- if .Values.controllerManager.create }}
 {{- if .Values.admissionWebhook.create }}
 ---
 apiVersion: cert-manager.io/v1
@@ -27,4 +26,4 @@ metadata:
 spec:
   selfSigned: {}
 {{- end }}
-{{- end }}
+

charts/nebula-operator/templates/admission-webhook-registration.yaml

@@ -1,37 +1,4 @@
-{{- if .Values.controllerManager.create }}
 {{- if .Values.admissionWebhook.create }}
-{{- if false }}
----
-apiVersion: admissionregistration.k8s.io/v1
-kind: MutatingWebhookConfiguration
-metadata:
-  annotations:
-    cert-manager.io/inject-ca-from: {{ template "nebula-operator.namespace" . }}/{{ template "admission-webhook.name" . }}-cert
-  name: {{ template "admission-webhook.name" . }}-mutating
-  labels:
-  {{- include "admission-webhook.labels" . | nindent 4 }}
-webhooks:
-  - admissionReviewVersions:
-      - v1
-    clientConfig:
-      service:
-        name: {{ template "admission-webhook.name" . }}-service
-        namespace: {{ template "nebula-operator.namespace" . }}
-        path: /apis/admission.nebula-graph.io/v1alpha1/statefulsetmutating
-    failurePolicy: Fail
-    name: statefulsetmutating.nebula-graph.io
-    rules:
-      - apiGroups:
-          - apps
-        apiVersions:
-          - v1
-        operations:
-          - CREATE
-          - UPDATE
-        resources:
-          - statefulsets
-    sideEffects: None
-{{- end }}
 ---
 apiVersion: admissionregistration.k8s.io/v1
 kind: ValidatingWebhookConfiguration
@@ -49,7 +16,7 @@ webhooks:
       service:
         name: {{ template "admission-webhook.name" . }}-service
         namespace: {{ template "nebula-operator.namespace" . }}
-        path: /apis/admission.nebula-graph.io/v1alpha1/nebulaclustervalidating
+        path: /validate-nebulacluster
     failurePolicy: Fail
     rules:
       - apiGroups:
@@ -61,50 +28,8 @@ webhooks:
           - UPDATE
         resources:
           - nebulaclusters
+        scope: "*"
     sideEffects: None
-  - name: statefulsetvalidating.nebula-graph.io
-    {{- include "admission-webhook.objectSelector" . | nindent 4 }}
-    admissionReviewVersions:
-      - v1
-    clientConfig:
-      service:
-        name: {{ template "admission-webhook.name" .}}-service
-        namespace: {{ template "nebula-operator.namespace" . }}
-        path: /apis/admission.nebula-graph.io/v1alpha1/statefulsetvalidating
-    failurePolicy: Fail
-    rules:
-      - apiGroups:
-          - apps
-        apiVersions:
-          - v1
-        operations:
-          - CREATE
-          - UPDATE
-        resources:
-          - statefulsets
-          - statefulsets/scale
-    sideEffects: None
-  - name: kruisestatefulsetvalidating.nebula-graph.io
-    {{- include "admission-webhook.objectSelector" . | nindent 4 }}
-    admissionReviewVersions:
-      - v1
-    clientConfig:
-      service:
-        name: {{ template "admission-webhook.name" . }}-service
-        namespace: {{ template "nebula-operator.namespace" . }}
-        path: /apis/admission.nebula-graph.io/v1alpha1/statefulsetvalidating
-    failurePolicy: Fail
-    rules:
-      - apiGroups:
-          - apps.kruise.io
-        apiVersions:
-          - v1alpha1
-        operations:
-          - CREATE
-          - UPDATE
-        resources:
-          - statefulsets
-          - statefulsets/scale
-    sideEffects: None
-{{- end }}
+    timeoutSeconds: 3
 {{- end }}
+

charts/nebula-operator/templates/admission-webhook-service.yaml

@@ -1,4 +1,3 @@
-{{- if .Values.controllerManager.create }}
 {{- if .Values.admissionWebhook.create }}
 ---
 apiVersion: v1
@@ -15,4 +14,4 @@ spec:
   selector:
   {{- include "admission-webhook.matchLabels" . | nindent 4 }}
 {{- end }}
-{{- end }}
+

charts/nebula-operator/templates/controller-manager-deployment.yaml

@@ -26,25 +26,18 @@ spec:
           command:
             - /usr/local/bin/controller-manager
           args:
-            {{- if .Values.healthProbeBindAddr }}
-            - --health-probe-bind-address={{ .Values.healthProbeBindAddr }}
-            {{- end }}
-            {{- if .Values.metricsBindAddr }}
-            - --metrics-bind-address={{ .Values.metricsBindAddr }}
-            {{- end }}
-            {{- if .Values.watchNamespace }}
-            - --watch-namespace={{ .Values.watchNamespace }}
-            {{- end }}
-            - --enable-kruise={{ .Values.enableKruise | default false }}
             {{- if .Values.syncPeriod }}
             - --sync-period={{ .Values.syncPeriod }}
             {{- end }}
-            {{- if .Values.maxConcurrentReconciles }}
-            - --max-concurrent-reconciles={{ .Values.maxConcurrentReconciles }}
+            {{- if .Values.concurrentNebulaClusterSyncs }}
+            - --concurrent-nebulacluster-syncs={{ .Values.concurrentNebulaClusterSyncs }}
+            {{- end }}
+            {{- if .Values.concurrentNebulaRestoreSyncs }}
+            - --concurrent-nebularestore-syncs={{ .Values.concurrentNebulaRestoreSyncs }}
             {{- end }}
-            - --enable-leader-election
-            - --leader-election-namespace={{ template "nebula-operator.namespace" . }}
-            - --admission-webhook={{ .Values.admissionWebhook.create | default false }}
+            - --leader-elect
+            - --leader-elect-resource-namespace={{ template "nebula-operator.namespace" . }}
+            - --enable-admission-webhook={{ .Values.admissionWebhook.create | default false }}
           {{- if or .Values.kubernetesClusterDomain .Values.controllerManager.env }}
           env:
             {{- if .Values.kubernetesClusterDomain }}
@@ -55,7 +48,7 @@ spec:
           {{- end }}
           {{- if .Values.admissionWebhook.create }}
           ports:
-            - containerPort: {{ .Values.webhookBindPort | default 9443 }}
+            - containerPort: {{ .Values.admissionWebhook.webhookBindPort | default 9443 }}
               name: webhook-server
               protocol: TCP
           {{- end }}
@@ -64,13 +57,13 @@ spec:
           livenessProbe:
             httpGet:
               path: /healthz
-              port: {{ (split ":" .Values.healthProbeBindAddr)._1 | default 8081 }}
+              port: 8081
             initialDelaySeconds: 15
             periodSeconds: 20
           readinessProbe:
             httpGet:
               path: /readyz
-              port: {{ (split ":" .Values.healthProbeBindAddr)._1 | default 8081 }}
+              port: 8081
             initialDelaySeconds: 5
             periodSeconds: 10
           securityContext:

charts/nebula-operator/values.yaml

@@ -1,6 +1,6 @@
 image:
   nebulaOperator:
-    image: vesoft/nebula-operator:v1.6.0
+    image: vesoft/nebula-operator:latest
     imagePullPolicy: Always
   kubeRBACProxy:
     image: bitnami/kube-rbac-proxy:0.14.2
@@ -23,6 +23,8 @@ controllerManager:
 
 admissionWebhook:
   create: false
+  # The TCP port the Webhook server binds to. (default 9443)
+  webhookBindPort: 9443
 
 scheduler:
   create: true
@@ -42,25 +44,19 @@ scheduler:
     disabled: [] # only in-tree plugins need to be defined here
 
 # Enable openkruise scheme for controller manager. (default false)
-enableKruise: false
+enableKruiseScheme: false
 
 # Period at which the controller forces the repopulation of its local object stores. (default 0h30m0s)
 syncPeriod: 0h30m0s
 
 # Namespace the controller watches for updates to Kubernetes objects, If empty, all namespaces are watched.
 watchNamespace:
 
-# The address the metric endpoint binds to. (default ":8080")
-metricsBindAddr: ":8080"
+# The number of NebulaCluster objects that are allowed to sync concurrently. (default 5)
+concurrentNebulaClusterSyncs: 5
 
-# The address the probe endpoint binds to. (default: ":8081")
-healthProbeBindAddr: ":8081"
-
-# The TCP port the Webhook server binds to. (default 9443)
-webhookBindPort: 9443
-
-# Maximum number of concurrently running reconcile loops for nebula cluster (default 3)
-maxConcurrentReconciles: 3
+# The number of NebulaRestore objects that are allowed to sync concurrently. (default 5)
+concurrentNebulaRestoreSyncs: 5
 
 nodeSelector: { }