oci-hook: clarify that Tetragon namespace is always added

Signed-off-by: Filip Nikolic <oss.filipn@gmail.com>
cilium · May 13, 2024 · 2424f81 · 2424f81
1 parent e523052
commit 2424f81
Show file tree

Hide file tree

Showing 3 changed files with 3 additions and 2 deletions.
diff --git a/docs/content/en/docs/reference/helm-chart.md b/docs/content/en/docs/reference/helm-chart.md
diff --git a/install/kubernetes/tetragon/README.md b/install/kubernetes/tetragon/README.md
diff --git a/install/kubernetes/tetragon/values.yaml b/install/kubernetes/tetragon/values.yaml
@@ -201,6 +201,7 @@ tetragon:
     interface: "oci-hooks"
     installDir: "/opt/tetragon"
     # -- Comma-separated list of namespaces to allow Pod creation for, in case tetragon-oci-hook fails to reach Tetragon agent.
+    # The namespace Tetragon is deployed in is always added as an exception and must not be added again.
     failAllowNamespaces: ""
     # -- Security context for oci-hook-setup init container
     securityContext: