Add OPA ignore label to opa and kube-system namespaces

mitchellhuang · Jul 15, 2020 · 09453ea · 09453ea
1 parent 3bf71b8
commit 09453ea
Showing 1 changed file with 12 additions and 0 deletions.
diff --git a/modules/opa/namespace.tf b/modules/opa/namespace.tf
@@ -1,5 +1,17 @@
 data "kubernetes_namespace" "opa_namespace" {
   metadata {
     name = "opa"
+    labels = {
+      "openpolicyagent.org/webhook" = "ignore"
+    }
+  }
+}
+
+data "kubernetes_namespace" "kube_system_namespace" {
+  metadata {
+    name = "kube-system"
+    labels = {
+      "openpolicyagent.org/webhook" = "ignore"
+    }
   }
 }