Exclude kube-system namespace from policy enforcement

castai · Nov 22, 2023 · 58b3d2a · 58b3d2a
1 parent 1518283
commit 58b3d2a
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/charts/castai-kvisor/templates/webhook.yaml b/charts/castai-kvisor/templates/webhook.yaml
@@ -10,7 +10,7 @@ webhooks:
       matchExpressions:
         - key: "kubernetes.io/metadata.name"
           operator: NotIn
-          values: ["{{ .Release.Namespace }}"]
+          values: ["{{ .Release.Namespace }}", "kube-system"]
     rules:
       - apiGroups: [ "" ]
         apiVersions: [ "v1" ]