Enable users to add namespace exceptions in case OCI hook fails
f1ko opened this issue · comments
When using Tetragon with the OCI hook feature enabled (ociHookSetup.enabled: true) all Pod creations except for those in kube-system are prevented when the agent is down.
This can lead to an outage for business-critical applications that are deployed in other namespaces.
Users shall be able to pass a list of namespaces that shall be excluded in a similar fashion as is the case for kube-system.