Add default configs to mutatingwebhookconfig

Signed-off-by: Rita Zhang <rita.z.zhang@gmail.com>
open-policy-agent · Jun 12, 2021 · b5e645a · b5e645a
1 parent bf94eb3
commit b5e645a
Show file tree

Hide file tree

Showing 3 changed files with 16 additions and 0 deletions.
diff --git a/config/overlays/mutation_webhook/webhook.yaml b/config/overlays/mutation_webhook/webhook.yaml
@@ -30,3 +30,8 @@ webhooks:
     resources:
     - '*'
   sideEffects: None
+  timeoutSeconds: 3
+  namespaceSelector:
+    matchExpressions:
+      - key: admission.gatekeeper.sh/ignore
+        operator: DoesNotExist
diff --git a/deploy/experimental/gatekeeper-mutation.yaml b/deploy/experimental/gatekeeper-mutation.yaml
@@ -830,6 +830,12 @@ webhooks:
     - UPDATE
     resources:
     - '*'
+  sideEffects: None
+  timeoutSeconds: 3
+  namespaceSelector:
+    matchExpressions:
+      - key: admission.gatekeeper.sh/ignore
+        operator: DoesNotExist
 ---
 apiVersion: v1
 kind: ServiceAccount

diff --git a/...per/templates/gatekeeper-mutating-webhook-configuration-mutatingwebhookconfiguration.yaml b/...per/templates/gatekeeper-mutating-webhook-configuration-mutatingwebhookconfiguration.yaml
@@ -21,6 +21,10 @@ webhooks:
   failurePolicy: Ignore
   matchPolicy: Exact
   name: mutation.gatekeeper.sh
+  namespaceSelector:
+    matchExpressions:
+    - key: admission.gatekeeper.sh/ignore
+      operator: DoesNotExist
   rules:
   - apiGroups:
     - '*'
@@ -32,4 +36,5 @@ webhooks:
     resources:
     - '*'
   sideEffects: None
+  timeoutSeconds: 3
 {{- end }}