charts: added lease resource exclusion from validating webhook

Author: maorhalevi-so

charts/s1-agent/templates/hooks/webhookconfiguration.yaml

@@ -87,5 +87,7 @@ webhooks:
   rules:
     {{- toYaml .Values.admissionControllers.validating.rules | nindent 4 }}
 {{- toYaml .Values.admissionControllers.validating.selector | nindent 2 }}
+  matchConditions:
+    {{- toYaml .Values.admissionControllers.validating.matchConditions | nindent 4 }}
 {{- end }}
 {{ end }}

charts/s1-agent/values.yaml

@@ -113,6 +113,9 @@ admissionControllers:
       resources:
       - '*'
       scope: '*'
+    matchConditions:
+      - name: 'exclude-leases'
+        expression: '!(request.resource.group == "coordination.k8s.io" && request.resource.resource == "leases")' # Match non-lease resources.
 
 helper:
   fullnameOverride: ""