Enable setting custom objectSelector for webhook (#2407)

* Enable setting custom objectSelector for webhook #650

* Add formatting changes

* Add webhook changes to README

* Read update suggestion

* Update READ table header to original

Author: Shreya027

helm/aws-load-balancer-controller/Chart.yaml

@@ -1,7 +1,7 @@
 apiVersion: v2
 name: aws-load-balancer-controller
 description: AWS Load Balancer Controller Helm chart for Kubernetes
-version: 1.3.3
+version: 1.3.4
 appVersion: v2.3.1
 home: https://github.com/aws/eks-charts
 icon: https://raw.githubusercontent.com/aws/eks-charts/master/docs/logo/aws.png

helm/aws-load-balancer-controller/README.md

@@ -214,3 +214,5 @@ The default values set by the application itself can be confirmed [here](https:/
 | `enableBackendSecurityGroup`                | If enabled, controller uses shared security group for backend traffic                                    | `true`                                                                             |
 | `backendSecurityGroup`                      | Backend security group to use instead of auto created one if the feature is enabled                      | ``                                                                                 |
 | `disableRestrictedSecurityGroupRules`       | If disabled, controller will not specify port range restriction in the backend security group rules      | `false`                                                                            |
+| `objectSelector.matchExpressions`           | Webhook configuration to select specific pods by specifying the expression to be matched                 | None                                                                               |
+| `objectSelector.matchLabels`                | Webhook configuration to select specific pods by specifying the key value label pair to be matched       | None                                                                               |

helm/aws-load-balancer-controller/templates/webhook.yaml

@@ -37,6 +37,13 @@ webhooks:
       operator: NotIn
       values:
       - {{ include "aws-load-balancer-controller.name" . }}
+    {{- if .Values.objectSelector.matchExpressions }}
+    {{- toYaml .Values.objectSelector.matchExpressions | nindent 4 }}
+    {{- end }}
+    {{- if .Values.objectSelector.matchLabels }}
+    matchLabels:
+    {{- toYaml .Values.objectSelector.matchLabels | nindent 6 }}
+    {{- end }}
   rules:
   - apiGroups:
     - ""

helm/aws-load-balancer-controller/values.yaml

@@ -232,3 +232,13 @@ backendSecurityGroup:
 
 # disableRestrictedSecurityGroupRules specifies whether to disable creating port-range restricted security group rules for traffic
 disableRestrictedSecurityGroupRules:
+
+# objectSelector for webhook
+objectSelector:
+  matchExpressions:
+  # - key: <key>
+  #   operator: <operator>
+  #   values:
+  #   - <value>
+  matchLabels:
+  #   key: value