PATCH: Add openshift namespaces exclusions to prevent kueue validatin…

…g and mutating webhooks to interfere with system jobs
opendatahub-io · Nov 29, 2024 · db8b9da · db8b9da
1 parent d1f4cfc
commit db8b9da
Show file tree

Hide file tree

Showing 2 changed files with 34 additions and 0 deletions.
diff --git a/config/rhoai/mutating_webhook_patch.yaml b/config/rhoai/mutating_webhook_patch.yaml
@@ -5,3 +5,20 @@ metadata:
 webhooks:
   - $patch: delete
     name: mpod.kb.io
+  - name: mjob.kb.io
+    namespaceSelector:
+      matchExpressions:
+      - key: kubernetes.io/metadata.name
+        operator: NotIn
+        values:
+        - kube-system
+        - kube-public
+        - openshift
+        - openshift-config
+        - openshift-config-managed
+        - openshift-etcd
+        - openshift-image-registry
+        - openshift-marketplace
+        - openshift-monitoring
+        - openshift-operator-lifecycle-manager
+        - openshift-operators
diff --git a/config/rhoai/validating_webhook_patch.yaml b/config/rhoai/validating_webhook_patch.yaml
@@ -5,3 +5,20 @@ metadata:
 webhooks:
   - $patch: delete
     name: vpod.kb.io
+  - name: vjob.kb.io
+    namespaceSelector:
+      matchExpressions:
+      - key: kubernetes.io/metadata.name
+        operator: NotIn
+        values:
+        - kube-system
+        - kube-public
+        - openshift
+        - openshift-config
+        - openshift-config-managed
+        - openshift-etcd
+        - openshift-image-registry
+        - openshift-marketplace
+        - openshift-monitoring
+        - openshift-operator-lifecycle-manager
+        - openshift-operators