Merge pull request kubernetes-sigs#249 from mengqiy/whitelist_ns

✨ default namespace selector for webhook

Author: k8s-ci-robot

pkg/webhook/bootstrap.go

@@ -297,6 +297,17 @@ func (s *Server) validatingWHConfigs() (runtime.Object, error) {
 }
 
 func (s *Server) admissionWebhook(path string, wh *admission.Webhook) (*admissionregistration.Webhook, error) {
+	if wh.NamespaceSelector == nil && len(s.Service.Namespace) > 0 {
+		wh.NamespaceSelector = &metav1.LabelSelector{
+			MatchExpressions: []metav1.LabelSelectorRequirement{
+				{
+					Key:      "control-plane",
+					Operator: metav1.LabelSelectorOpDoesNotExist,
+				},
+			},
+		}
+	}
+
 	webhook := &admissionregistration.Webhook{
 		Name:              wh.GetName(),
 		Rules:             wh.Rules,