Does Kubebuilder Annotation support NamespaceSelector?

[moluzhui]

Can kubebuilder_annotation support the following namespace configuration?

apiVersion: admissionregistration.k8s.io/v1
kind: MutatingWebhookConfiguration
metadata:
  name: mutate-config
webhooks:
- name: mutate-config
  clientConfig:
    service:
      name: webhook-server
      namespace: default
      path: "/mutate-pod"
  rules:
  - operations: ["CREATE"]
    apiGroups: [""]
    apiVersions: ["v1"]
    resources: ["pods"]
  namespaceSelector:
      matchLabels:
        mutate-pod: true

[camilamacedo86]

KubeBuilder annotations (markers) don't provide direct support for the namespaceSelector configuration in webhooks. You would need to add the namespaceSelector field manually to the generated webhook configuration after using the CLI.

While KubeBuilder can scaffold a large portion of your webhook configuration using annotations like:

// +kubebuilder:webhook:path=/mutate-pod,mutating=true,failurePolicy=fail,groups="",resources=pods,verbs=create,versions=v1,name=mutate-config.admission.yourdomain.com

Also, you might be interested in the the option available in the kustomize.yml to create labels
See:

kubebuilder/testdata/project-v4/config/default/kustomization.yaml

Lines 11 to 15 in 6893605

	# Labels to add to all resources and selectors.
	#labels:
	#- includeSelectors: true
	# pairs:
	# someName: someValue

Regarding the original question, I'd recommend raising an issue with the controller-tools project, as it is responsible for the logic behind the markers. You can find the project here. It may be beneficial to present it as a Request for Enhancement (RFE) to draw attention to this specific need.

Closing this one as answered.
However, please feel free to re-open if you see fit.