feat(k8s-ycl): Release v0.2.0

charts/apps/k8s-ycl/templates/_helpers.tpl

@@ -6,6 +6,20 @@
 /mutate--v1-pod
 {{- end -}}
 
+{{- define "k8s-ycl.ignoredNamespaces" -}}
+  {{- $ownNamespace := $.Release.Namespace -}}
+  {{- $ignoredNamespaces := list -}}
+  {{- if $.Values.webhook.ignoreOwnNamespace -}}
+    {{- $ignoredNamespaces = append $ignoredNamespaces $ownNamespace -}}
+  {{- end -}}
+  {{- with $.Values.webhook.ignoredNamespaces -}}
+    {{- range . -}}
+      {{- $ignoredNamespaces = append $ignoredNamespaces . -}}
+    {{- end -}}
+  {{- end -}}
+  {{- $ignoredNamespaces | uniq | toYaml -}}
+{{- end -}}
+
 {{- define "k8s-ycl.selfSignedIssuer" -}}
 {{ printf "%s-webhook-selfsign" (include "bjw-s.common.lib.chart.names.fullname" .) }}
 {{- end -}}

charts/apps/k8s-ycl/templates/admissionregistration.yaml

@@ -15,9 +15,7 @@ webhooks:
       matchExpressions:
       - key: kubernetes.io/metadata.name
         operator: NotIn
-        values:
-        - kube-system
-        - {{ .Release.Namespace | quote }}
+        values: {{ include "k8s-ycl.ignoredNamespaces" . | nindent  10 }}
     clientConfig:
       service:
         namespace: {{ .Release.Namespace | quote }}

charts/apps/k8s-ycl/templates/common.yaml

@@ -12,6 +12,9 @@ service:
       http:
         enabled: true
         port: 9443
+      metrics:
+        enabled: true
+        port: 8080
       probe:
         enabled: true
         port: 8081