vault-secrets-webhook: Add default objectSelector to not trigger on i…

…nternal Helm v3 state resources
rtnpro · Mar 31, 2021 · ef0d815 · ef0d815
1 parent 24ad001
commit ef0d815
Showing 1 changed file with 8 additions and 0 deletions.
diff --git a/charts/vault-secrets-webhook/templates/apiservice-webhook.yaml b/charts/vault-secrets-webhook/templates/apiservice-webhook.yaml
@@ -161,6 +161,10 @@ webhooks:
     {{- if .Values.objectSelector.matchExpressions }}
 {{ toYaml .Values.objectSelector.matchExpressions | indent 4 }}
     {{- end }}
+    - key: owner
+      operator: NotIn
+      values:
+      - helm
     - key: security.banzaicloud.io/mutate
       operator: NotIn
       values:
@@ -221,6 +225,10 @@ webhooks:
     {{- if .Values.objectSelector.matchExpressions }}
 {{ toYaml .Values.objectSelector.matchExpressions | indent 4 }}
     {{- end }}
+    - key: owner
+      operator: NotIn
+      values:
+      - helm
     - key: security.banzaicloud.io/mutate
       operator: NotIn
       values: