Add matchConditions to only run webhooks on pods with annotation

[wnagele]

No description provided.

[joggrbot]

📝 Documentation Analysis

All docs are up to date! 🎉

---

✅ Latest commit analyzed: 41b237f | Powered by Joggr

[wnagele]

Also reverting PR #3 as we are now restricted and should not have the risk of hurting other Pods in a cluster.

[wnagele]

Manifest used for manual testing:

apiVersion: v1
kind: Pod
metadata:
  name: my-test-pod
  #annotations:
  #  k8s.v1alpha.galactic.datumapis.com/vpc-attachment: my-test-vpc
spec:
  containers:
  - name: test-container
    command: ["/bin/ash", "-c", "trap : TERM INT; sleep infinity & wait"]
    image: alpine

Verified no call to the webhook endpoint:

# kubectl -n galactic-operator-system logs galactic-operator-controller-manager-6866fc58db-s9j26 |grep Validate
[no output]

Automated test to be added later: https://kyverno.github.io/chainsaw/main/