From 35c4becc7d38752488d3c6eaf8657576175a2237 Mon Sep 17 00:00:00 2001 From: Christopher Swenson Date: Mon, 23 May 2022 14:07:10 -0700 Subject: [PATCH 1/2] Update example injector mutating webhook config to exclude agent pod - Original issue: https://github.com/hashicorp/vault-k8s/issues/258 - Helm fix: https://github.com/hashicorp/vault-helm/pull/736 --- deploy/injector-mutating-webhook.yaml | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/deploy/injector-mutating-webhook.yaml b/deploy/injector-mutating-webhook.yaml index 212fbae7..265df714 100644 --- a/deploy/injector-mutating-webhook.yaml +++ b/deploy/injector-mutating-webhook.yaml @@ -24,5 +24,9 @@ webhooks: apiVersions: ["v1"] resources: ["deployments", "jobs", "pods", "statefulsets"] namespaceSelector: {} - objectSelector: {} + objectSelector: + matchExpressions: + - key: app.kubernetes.io/name + operator: NotIn + values: ["vault-agent-injector"] failurePolicy: Ignore From 57be5561c72a48dc97f48cac66ee28e096fbd284 Mon Sep 17 00:00:00 2001 From: Christopher Swenson Date: Mon, 23 May 2022 16:53:35 -0700 Subject: [PATCH 2/2] Update deploy/injector-mutating-webhook.yaml Co-authored-by: Theron Voran --- deploy/injector-mutating-webhook.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/deploy/injector-mutating-webhook.yaml b/deploy/injector-mutating-webhook.yaml index 265df714..69d590cc 100644 --- a/deploy/injector-mutating-webhook.yaml +++ b/deploy/injector-mutating-webhook.yaml @@ -28,5 +28,5 @@ webhooks: matchExpressions: - key: app.kubernetes.io/name operator: NotIn - values: ["vault-agent-injector"] + values: ["vault-injector"] failurePolicy: Ignore