Only apply on explicitly labeled namespaces

deploy/kubernetes/mutatingwebhookconfiguration.yaml

@@ -19,11 +19,10 @@ webhooks:
   name: kube-resourceless.airfocus.io
   namespaceSelector:
     matchExpressions:
-    - key: kubernetes.io/metadata.name
-      operator: NotIn
+    - key: kube-resourceless.airfocus.io/enabled
+      operator: In
       values:
-      - "kube-system"
-      - "kube-resourceless"
+      - "true"
   rules:
   - apiGroups:
     - ""

test/examples/kustomization.yaml

@@ -1,2 +1,3 @@
 resources:
-- deployment.yaml
+- namespace-match
+- namespace-notmatch

test/examples/deployment.yaml → test/examples/namespace-match/deployment.yaml

@@ -5,7 +5,7 @@ metadata:
   labels:
     app: deplpoyment
 spec:
-  replicas: 5
+  replicas: 1
   selector:
     matchLabels:
       app: deplpoyment

test/examples/namespace-match/kustomization.yaml

@@ -0,0 +1,4 @@
+namespace: namespace-match
+resources:
+- namespace.yaml
+- deployment.yaml

test/examples/namespace-match/namespace.yaml

@@ -0,0 +1,6 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: namespace-match
+  labels:
+    kube-resourceless.airfocus.io/enabled: "true"

test/examples/namespace-notmatch/deployment.yaml

@@ -0,0 +1,83 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: deployment
+  labels:
+    app: deplpoyment
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: deplpoyment
+  template:
+    metadata:
+      labels:
+        app: deplpoyment
+    spec:
+      terminationGracePeriodSeconds: 1
+      containers:
+      - name: container-1
+        image: nginx:alpine
+        command:
+        - sleep
+        args:
+        - infinite
+        resources:
+          requests:
+            cpu: 100m
+            memory: 128Mi
+          limits:
+            cpu: 100m
+            memory: 128Mi
+      - name: container-2
+        image: nginx:alpine
+        command:
+        - sleep
+        args:
+        - infinite
+        resources:
+          requests:
+            cpu: 100m
+            memory: 128Mi
+          limits:
+            cpu: 100m
+            memory: 128Mi
+      - name: container-3
+        image: nginx:alpine
+        command:
+        - sleep
+        args:
+        - infinite
+      initContainers:
+        - name: init-container-1
+          image: nginx:alpine
+          command:
+          - echo
+          args:
+          - done
+          resources:
+            requests:
+              cpu: 100m
+              memory: 128Mi
+            limits:
+              cpu: 100m
+              memory: 128Mi
+        - name: init-container-2
+          image: nginx:alpine
+          command:
+          - echo
+          args:
+          - done
+          resources:
+            requests:
+              cpu: 100m
+              memory: 128Mi
+            limits:
+              cpu: 100m
+              memory: 128Mi
+        - name: init-container-3
+          image: nginx:alpine
+          command:
+          - echo
+          args:
+          - done

test/examples/namespace-notmatch/kustomization.yaml

@@ -0,0 +1,4 @@
+namespace: namespace-notmatch
+resources:
+- namespace.yaml
+- deployment.yaml

test/examples/namespace-notmatch/namespace.yaml

@@ -0,0 +1,4 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: namespace-notmatch