MutatingWebhookConfiguration/ValidatingWebhookConfiguration gets flagged on GKE

[Olivier Boucher]

What is missing?

There is no way to configure the scope property on the 2 webhook configurations. This triggers a warning inside GKE:

https://cloud.google.com/kubernetes-engine/docs/how-to/optimize-webhooks#exclude_kube-system_and_kube-node-lease_namespaces

They require that webhook configurations must be namespaced, which I think makes sense.

Why do we need it?

To be able to comply with GKE

Environment

• kube-prometheus version: Chart 56.6.2

Anything else we need to know?: