feat/support-ObjectSelectorAdmissionSkip-helm-value (#349)

* feat/support-ObjectSelectorAdmissionSkip-helm-value * set AllowAdmissionSkip back to false * add matchLabels support Co-authored-by: Bertrand Delage <bertrand.delage@sap.com> Co-authored-by: Stuart Hayton <sjhx@users.noreply.github.com>
IBM · Oct 4, 2021 · e831ca0 · e831ca0
1 parent 0d00ddc
commit e831ca0
Show file tree

Hide file tree

Showing 2 changed files with 13 additions and 0 deletions.
diff --git a/helm/portieris/templates/webhooks.yaml b/helm/portieris/templates/webhooks.yaml
@@ -67,3 +67,7 @@ webhooks:
         values:
         - skip
     {{ end }}
+    {{ if .Values.ObjectSelectorAdmissionSkip }}
+    objectSelector:
+{{ toYaml .Values.ObjectSelectorAdmissionSkip | indent 6 }}
+    {{ end }}
diff --git a/helm/portieris/values.yaml b/helm/portieris/values.yaml
@@ -83,6 +83,15 @@ affinity:
 # enable this option!
 AllowAdmissionSkip: false
 
+ObjectSelectorAdmissionSkip: 
+    # matchLabels:
+    #   app: xxx
+    # matchExpressions:
+    #   - key: xxxxx.xxxxx/xxx
+    #     operator: NotIn
+    #     values:
+    #     - xxxx
+
 clusterPolicy:
   allowedRepositories:
     # This permissive policy allows all images in namespaces which do not have an ImagePolicy.