feat: allow setting mutating webhook failurepolicy and objectSelector…

… via helm (#715) Signed-off-by: Marco Orovecchia <[email protected]> Co-authored-by: Michael Beemer <[email protected]> Co-authored-by: Lukas Reining <[email protected]>
open-feature · Jan 13, 2025 · e3f1e24 · e3f1e24
1 parent 9b8e8c3
commit e3f1e24
Show file tree

Hide file tree

Showing 4 changed files with 22 additions and 0 deletions.
diff --git a/chart/open-feature-operator/README.md b/chart/open-feature-operator/README.md
@@ -108,6 +108,13 @@ The command removes all the Kubernetes components associated with the chart and
 | `labels`                | Labels to apply to all of the pods in the operator.                                                                                                                                                                                                                              | `{}`   |
 | `annotations`           | Annotations to apply to all of the pods in the operator.                                                                                                                                                                                                                         | `{}`   |
 
+### Mutating Webhook configuration
+
+| Name                             | Description                                               | Value    |
+| -------------------------------- | --------------------------------------------------------- | -------- |
+| `mutatingWebhook.failurePolicy`  | FailurePolicy when the webhook does not respond           | `Ignore` |
+| `mutatingWebhook.objectSelector` | ObjectSelector on which pods the mutatingWebhook will run | `{}`     |
+
 ### Sidecar configuration
 
 | Name                                             | Description                                                                                                                                                                                                                                                 | Value                        |

diff --git a/chart/open-feature-operator/values.yaml b/chart/open-feature-operator/values.yaml
@@ -18,6 +18,12 @@ labels: {}
 ## @param annotations Annotations to apply to all of the pods in the operator.
 annotations: {}
 
+## @section Mutating Webhook configuration
+mutatingWebhook:
+  ## @param mutatingWebhook.failurePolicy FailurePolicy when the webhook does not respond
+  failurePolicy: Ignore
+  ## @param mutatingWebhook.objectSelector ObjectSelector on which pods the mutatingWebhook will run
+  objectSelector: {}
 ## @section Sidecar configuration
 sidecarConfiguration:
   ## @param sidecarConfiguration.port Sets the value of the `XXX_PORT` environment variable for the injected sidecar.

diff --git a/config/overlays/helm/kustomization.yaml b/config/overlays/helm/kustomization.yaml
@@ -16,6 +16,7 @@ patchesStrategicMerge:
   - manager.yaml
   - exclude-webhook-server-container-port.yaml
   - exclude-validatingwebhook.yaml
+  - mutatingwebhook.yaml
 
 configMapGenerator:
 - name: manager-config

diff --git a/config/overlays/helm/mutatingwebhook.yaml b/config/overlays/helm/mutatingwebhook.yaml
@@ -0,0 +1,8 @@
+apiVersion: admissionregistration.k8s.io/v1
+kind: MutatingWebhookConfiguration
+metadata:
+  name: mutating-webhook-configuration
+webhooks:
+  - name: mutate.openfeature.dev
+    failurePolicy: "___{{ .Values.mutatingWebhook.failurePolicy }}___"
+    objectSelector: "___{{ toYaml .Values.mutatingWebhook.objectSelector | nindent 4 }}___"