Merge pull request #107 from TomRyan-321/fix-namespace-selector-relea…

…se-namespace Fix namespace selector in webhook to exclude release namespace + move master anti-affinity to preference
CrowdStrike · Mar 24, 2022 · 526bf21 · 526bf21
2 parents 86d3e8c + 7625910
commit 526bf21
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 3 deletions.
diff --git a/helm-charts/falcon-sensor/Chart.yaml b/helm-charts/falcon-sensor/Chart.yaml
@@ -15,12 +15,12 @@ type: application
 # This is the chart version. This version number should be incremented each time you make changes
 # to the chart and its templates, including the app version.
 # Versions are expected to follow Semantic Versioning (https://semver.org/)
-version: 1.11.0
+version: 1.12.0
 
 # This is the version number of the application being deployed. This version number should be
 # incremented each time you make changes to the application. Versions are not expected to
 # follow Semantic Versioning. They should reflect the version the application is using.
-appVersion: 1.11.0
+appVersion: 1.12.0
 
 keywords:
   - CrowdStrike

diff --git a/helm-charts/falcon-sensor/templates/container_deployment_webhook.yaml b/helm-charts/falcon-sensor/templates/container_deployment_webhook.yaml
@@ -54,6 +54,10 @@ spec:
                 operator: In
                 values:
                 - linux
+          preferredDuringSchedulingIgnoredDuringExecution:
+          - weight: 1
+            preference:
+              matchExpressions:
               - key: node-role.kubernetes.io/master
                 operator: DoesNotExist
       securityContext:
@@ -185,7 +189,7 @@ webhooks:
         operator: {{ if .Values.container.disableNSInjection }}In{{ else }}NotIn{{- end }}
         values:
           - {{ if .Values.container.disableNSInjection }}enabled{{ else }}disabled{{- end }}
-      - key: "name"
+      - key: kubernetes.io/metadata.name
         operator: "NotIn"
         values:
         - {{ .Release.Namespace }}