Add webhook options only for openshift deployments to handle node debugging label

Author: ngopalak-redhat

deploy/openshift-dev.yaml

@@ -2115,6 +2115,11 @@ spec:
                 description: Verbosity specifies the logging verbosity of the daemon.
                 type: integer
               webhookOptions:
+                default:
+                - name: nodedebuggingpod.spo.io
+                  objectSelector:
+                    matchLabels:
+                      debug.openshift.io/managed-by: oc-debug
                 description: |-
                   WebhookOpts set custom namespace selectors and failure mode for
                   SPO's webhooks

deploy/openshift-downstream.yaml

@@ -1806,6 +1806,11 @@ spec:
                 description: Verbosity specifies the logging verbosity of the daemon.
                 type: integer
               webhookOptions:
+                default:
+                - name: nodedebuggingpod.spo.io
+                  objectSelector:
+                    matchLabels:
+                      debug.openshift.io/managed-by: oc-debug
                 description: |-
                   WebhookOpts set custom namespace selectors and failure mode for
                   SPO's webhooks

deploy/overlays/openshift-dev/kustomization.yaml

@@ -12,11 +12,22 @@ images:
   newTag: latest
 resources:
 - ../cluster
-
 patches:
+- patch: |-
+    - op: replace
+      path: "/spec/versions/0/schema/openAPIV3Schema/properties/spec/properties/webhookOptions/default"
+      value:
+        - name: nodedebuggingpod.spo.io
+          objectSelector:
+            matchLabels:
+              debug.openshift.io/managed-by: "oc-debug"
+  target:
+    kind: CustomResourceDefinition
+    name: securityprofilesoperatordaemons.security-profiles-operator.x-k8s.io
 - patch: |-
     - op: add
       path:  "/metadata/labels/openshift.io~1cluster-monitoring"
       value: "true"
   target:
     kind: Namespace
+

deploy/overlays/openshift-downstream/kustomization.yaml

@@ -10,6 +10,17 @@ sortOptions:
 resources:
 - ../cluster
 patches:
+- patch: |-
+    - op: replace
+      path: "/spec/versions/0/schema/openAPIV3Schema/properties/spec/properties/webhookOptions/default"
+      value:
+        - name: nodedebuggingpod.spo.io
+          objectSelector:
+            matchLabels:
+              debug.openshift.io/managed-by: "oc-debug"
+  target:
+    kind: CustomResourceDefinition
+    name: securityprofilesoperatordaemons.security-profiles-operator.x-k8s.io
 - path: service_discovery_rules.yaml
   target:
     kind: ClusterRole