feat: allow setting mutating webhook failurepolicy and objectSelector via helm (#715)

Signed-off-by: Marco Orovecchia <marco@orovecchia.at>
Co-authored-by: Michael Beemer <beeme1mr@users.noreply.github.com>
Co-authored-by: Lukas Reining <lukas.reining@codecentric.de>

Author: 3 people

chart/open-feature-operator/README.md

@@ -108,6 +108,13 @@ The command removes all the Kubernetes components associated with the chart and
 | `labels`                | Labels to apply to all of the pods in the operator.                                                                                                                                                                                                                              | `{}`   |
 | `annotations`           | Annotations to apply to all of the pods in the operator.                                                                                                                                                                                                                         | `{}`   |
 
+### Mutating Webhook configuration
+
+| Name                             | Description                                               | Value    |
+| -------------------------------- | --------------------------------------------------------- | -------- |
+| `mutatingWebhook.failurePolicy`  | FailurePolicy when the webhook does not respond           | `Ignore` |
+| `mutatingWebhook.objectSelector` | ObjectSelector on which pods the mutatingWebhook will run | `{}`     |
+
 ### Sidecar configuration
 
 | Name                                             | Description                                                                                                                                                                                                                                                 | Value                        |

chart/open-feature-operator/values.yaml

@@ -18,6 +18,12 @@ labels: {}
 ## @param annotations Annotations to apply to all of the pods in the operator.
 annotations: {}
 
+## @section Mutating Webhook configuration
+mutatingWebhook:
+  ## @param mutatingWebhook.failurePolicy FailurePolicy when the webhook does not respond
+  failurePolicy: Ignore
+  ## @param mutatingWebhook.objectSelector ObjectSelector on which pods the mutatingWebhook will run
+  objectSelector: {}
 ## @section Sidecar configuration
 sidecarConfiguration:
   ## @param sidecarConfiguration.port Sets the value of the `XXX_PORT` environment variable for the injected sidecar.

config/overlays/helm/kustomization.yaml

@@ -16,6 +16,7 @@ patchesStrategicMerge:
   - manager.yaml
   - exclude-webhook-server-container-port.yaml
   - exclude-validatingwebhook.yaml
+  - mutatingwebhook.yaml
 
 configMapGenerator:
 - name: manager-config

config/overlays/helm/mutatingwebhook.yaml

@@ -0,0 +1,8 @@
+apiVersion: admissionregistration.k8s.io/v1
+kind: MutatingWebhookConfiguration
+metadata:
+  name: mutating-webhook-configuration
+webhooks:
+  - name: mutate.openfeature.dev
+    failurePolicy: "___{{ .Values.mutatingWebhook.failurePolicy }}___"
+    objectSelector: "___{{ toYaml .Values.mutatingWebhook.objectSelector | nindent 4 }}___"