Update examples (#643)

examples/gatekeeper-v3.10.0/README.md

@@ -0,0 +1,13 @@
+Downloaded via
+
+```bash
+ytt \
+  -f https://raw.githubusercontent.com/open-policy-agent/gatekeeper/release-3.10/deploy/gatekeeper.yaml \
+  -f https://raw.githubusercontent.com/open-policy-agent/gatekeeper/v3.10.0/example/templates/k8srequiredlabels_template.yaml \
+  -f https://raw.githubusercontent.com/open-policy-agent/gatekeeper/v3.10.0/example/constraints/all_pod_must_have_gatekeeper_namespaceselector.yaml \
+  -f examples/gatekeeper-v3.10.0/exists.yml \
+  -f examples/gatekeeper-v3.10.0/overlay.yml > examples/gatekeeper-v3.10.0/config.yml
+```
+
+- `exists.yml` is used to wait for CRD created by gatekeeper controller
+- `overlay.yml` is used with `ytt` to add ordering

examples/gatekeeper-v3.10.0/exists.yml

@@ -0,0 +1,12 @@
+apiVersion: apiextensions.k8s.io/v1
+kind: CustomResourceDefinition
+metadata:
+  name: k8srequiredlabels.constraints.gatekeeper.sh
+  annotations:
+    kapp.k14s.io/exists: ""
+spec:
+  group: constraints.gatekeeper.sh
+  versions:
+    - name: v1beta1
+  names:
+    kind: K8sRequiredLabels

examples/gatekeeper-v3.10.0/overlay.yml

@@ -0,0 +1,55 @@
+#@ load("@ytt:overlay", "overlay")
+
+#@overlay/match by=overlay.subset({"metadata":{"name":"gatekeeper-system"}})
+---
+metadata:
+  #@overlay/match missing_ok=True
+  annotations:
+    #@overlay/match missing_ok=True
+    kapp.k14s.io/change-group: namespace
+---
+
+
+#@ load("@ytt:overlay", "overlay")
+
+#@overlay/match by=overlay.subset({"metadata":{"name":"gatekeeper-validating-webhook-configuration"}})
+---
+metadata:
+  #@overlay/match missing_ok=True
+  annotations:
+    #@overlay/match missing_ok=True
+    kapp.k14s.io/change-rule: upsert after upserting namespace
+---
+
+
+#@ load("@ytt:overlay", "overlay")
+
+#@overlay/match by=overlay.subset({"kind": "Deployment", "metadata":{"name":"gatekeeper-controller-manager"}})
+---
+metadata:
+  #@overlay/match missing_ok=True
+  annotations:
+    #@overlay/match missing_ok=True
+    kapp.k14s.io/change-group: deployment
+---
+
+#@ load("@ytt:overlay", "overlay")
+
+#@overlay/match by=overlay.subset({"kind": "ConstraintTemplate", "metadata":{"name":"k8srequiredlabels"}})
+---
+metadata:
+  #@overlay/match missing_ok=True
+  annotations:
+    #@overlay/match missing_ok=True
+    kapp.k14s.io/change-rule: upsert after upserting deployment
+---
+
+#@ load("@ytt:overlay", "overlay")
+
+#@overlay/match by=overlay.subset({"kind": "CustomResourceDefinition", "metadata":{"name":"k8srequiredlabels.constraints.gatekeeper.sh"}})
+---
+metadata:
+  #@overlay/match missing_ok=True
+  annotations:
+    #@overlay/match missing_ok=True
+    kapp.k14s.io/change-rule: upsert after upserting deployment