Merge pull request #9 from maiqueb/webhook-listen-only-to-kubevirt-la…

…uncher-creates deploy, webhook: only listen to kubevirt launcher pod creation events
kubevirt · May 14, 2024 · e542b8e · e542b8e
2 parents b805080 + a5f8039
commit e542b8e
Show file tree

Hide file tree

Showing 2 changed files with 14 additions and 0 deletions.
diff --git a/config/default/kustomization.yaml b/config/default/kustomization.yaml
@@ -22,6 +22,17 @@ resources:
 patches:
 - path: manager_webhook_patch.yaml
 - path: webhookcainjection_patch.yaml
+- patch: |-
+    - op: add
+      path: /webhooks/0/objectSelector
+      value:
+        matchLabels:
+          kubevirt.io: virt-launcher
+  target:
+    kind: MutatingWebhookConfiguration
+    group: admissionregistration.k8s.io
+    version: v1
+    name: mutating-webhook-configuration
 
 replacements:
   - source: # Add cert-manager annotation to MutatingWebhookConfiguration

diff --git a/dist/install.yaml b/dist/install.yaml
@@ -326,6 +326,9 @@ webhooks:
       path: /mutate-v1-pod
   failurePolicy: Fail
   name: ipam-claims.k8s.cni.cncf.io
+  objectSelector:
+    matchLabels:
+      kubevirt.io: virt-launcher
   rules:
   - apiGroups:
     - ""