Exclude kube-system and kube-node-lease from webhook, explicity set matchPolicy to Equivalent

Author: gamingrobot

manifests/helm/templates/operator/webhook.yaml.tpl

@@ -11,6 +11,14 @@ webhooks:
     reinvocationPolicy: IfNeeded
     failurePolicy: Ignore
     timeoutSeconds: 2
+    namespaceSelector:
+      matchExpressions:
+      - key: kubernetes.io/metadata.name
+        operator: NotIn
+        values:
+        - kube-system
+        - kube-node-lease
+    matchPolicy: Equivalent
     rules:
       - apiGroups: [ "" ]
         apiVersions: [ "v1" ]

manifests/install/all/operator/base/webhook.yaml

@@ -10,6 +10,14 @@ webhooks:
     reinvocationPolicy: IfNeeded
     failurePolicy: Ignore
     timeoutSeconds: 2
+    namespaceSelector:
+      matchExpressions:
+      - key: kubernetes.io/metadata.name
+        operator: NotIn
+        values:
+        - kube-system
+        - kube-node-lease
+    matchPolicy: Equivalent
     rules:
       - apiGroups: [ "" ]
         apiVersions: [ "v1" ]