Merge pull request #4129 from HujinoKun/chore/rollout-configure-namespaceselector-option

[rollout-operator] Being able to configure the option namespaceSelector.matchExpressions

Author: tcp13equals2

charts/rollout-operator/Chart.yaml

@@ -2,7 +2,7 @@ apiVersion: v2
 name: rollout-operator
 description: "Grafana rollout-operator"
 type: application
-version: 0.41.0
+version: 0.42.0
 appVersion: v0.34.0
 home: https://github.com/grafana/rollout-operator
 kubeVersion: ^1.10.0-0

charts/rollout-operator/README.md

@@ -4,7 +4,7 @@ Helm chart for deploying [Grafana rollout-operator](https://github.com/grafana/r
 
 # rollout-operator
 
-![Version: 0.41.0](https://img.shields.io/badge/Version-0.41.0-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: v0.34.0](https://img.shields.io/badge/AppVersion-v0.34.0-informational?style=flat-square)
+![Version: 0.42.0](https://img.shields.io/badge/Version-0.42.0-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: v0.34.0](https://img.shields.io/badge/AppVersion-v0.34.0-informational?style=flat-square)
 
 Grafana rollout-operator
 
@@ -62,6 +62,7 @@ Manually applying these CRDs is only required if upgrading from a chart <= v0.32
 | imagePullSecrets | list | `[]` |  |
 | minReadySeconds | int | `10` |  |
 | nameOverride | string | `""` |  |
+| namespaceSelector.matchExpressions | list | `[]` | Namespace selector to filter which namespaces the webhooks apply to. See https://kubernetes.io/docs/reference/access-authn-authz/extensible-admission-controllers/#matching-requests-namespaceselector Example:     matchExpressions:       - key: team         operator: NotIn         values:           - team-a |
 | nodeSelector | object | `{}` |  |
 | podAnnotations | object | `{}` | Pod Annotations |
 | podLabels | object | `{}` | Pod (extra) Labels |

charts/rollout-operator/templates/no-downscale-webhook.yaml

@@ -31,6 +31,10 @@ webhooks:
     namespaceSelector:
       matchLabels:
         kubernetes.io/metadata.name: {{ .Release.Namespace | quote }}
+      {{- with .Values.namespaceSelector.matchExpressions }}
+      matchExpressions:
+        {{- toYaml . | nindent 8 }}
+      {{- end }}
     {{- with .Values.webhooks.objectSelector }}
     objectSelector:
       {{- toYaml . | nindent 6 }}

charts/rollout-operator/templates/pod-eviction-webhook.yaml

@@ -30,6 +30,10 @@ webhooks:
     namespaceSelector:
       matchLabels:
         kubernetes.io/metadata.name: {{ .Release.Namespace | quote }}
+      {{- with .Values.namespaceSelector.matchExpressions }}
+      matchExpressions:
+        {{- toYaml . | nindent 8 }}
+      {{- end }}
     {{- with .Values.webhooks.objectSelector }}
     objectSelector:
       {{- toYaml . | nindent 6 }}

charts/rollout-operator/templates/prepare-downscale-webhook.yaml

@@ -31,6 +31,10 @@ webhooks:
     namespaceSelector:
       matchLabels:
         kubernetes.io/metadata.name: {{ .Release.Namespace | quote }}
+      {{- with .Values.namespaceSelector.matchExpressions }}
+      matchExpressions:
+        {{- toYaml . | nindent 8 }}
+      {{- end }}
     {{- with .Values.webhooks.objectSelector }}
     objectSelector:
       {{- toYaml . | nindent 6 }}

charts/rollout-operator/templates/zone-aware-pod-disruption-budget-validating-webhook.yaml

@@ -30,6 +30,10 @@ webhooks:
     namespaceSelector:
       matchLabels:
         kubernetes.io/metadata.name: {{ .Release.Namespace | quote }}
+      {{- with .Values.namespaceSelector.matchExpressions }}
+      matchExpressions:
+        {{- toYaml . | nindent 8 }}
+      {{- end }}
     {{- with .Values.webhooks.objectSelector }}
     objectSelector:
       {{- toYaml . | nindent 6 }}

charts/rollout-operator/values.yaml

@@ -124,3 +124,14 @@ webhooks:
   #         operator: In
   #         values:
   #           - production
+
+namespaceSelector:
+  # -- Namespace selector to filter which namespaces the webhooks apply to.
+  # See https://kubernetes.io/docs/reference/access-authn-authz/extensible-admission-controllers/#matching-requests-namespaceselector
+  # Example:
+  #     matchExpressions:
+  #       - key: team
+  #         operator: NotIn
+  #         values:
+  #           - team-a
+  matchExpressions: []