# cstor-webhook 为 K8s 准入组件，无独立 docker run 场景
docker pull docker.io/openebs/cstor-webhook:latest

# 通过 OpenEBS Helm/Operator 部署，手动拉取固定版本示例：
docker pull docker.io/openebs/cstor-webhook:3.6.0
# 实际运行由 Deployment + Service 注册至 apiserver

apiVersion: apps/v1
kind: Deployment
metadata:
  name: cstor-webhook
  namespace: openebs
spec:
  replicas: 1
  selector:
    matchLabels:
      app: cstor-webhook
  template:
    metadata:
      labels:
        app: cstor-webhook
    spec:
      containers:
        - name: webhook
          image: docker.io/openebs/cstor-webhook:3.6.0
          ports:
            - containerPort: 443
          volumeMounts:
            - name: certs
              mountPath: /etc/webhook/certs
      volumes:
        - name: certs
          secret:
            secretName: cstor-webhook-certs
---
apiVersion: v1
kind: Service
metadata:
  name: cstor-webhook
  namespace: openebs
spec:
  selector:
    app: cstor-webhook
  ports:
    - port: 443
      targetPort: 443