fix(webhook): ignore failures and filter out pods from cache registry

closes #15

Author: plaffitt

.gitignore

@@ -1,5 +1,5 @@
 helm/cache-registry/charts/*.tgz
-
+values.yaml
 
 # Binaries for programs and plugins
 *.exe

helm/cache-registry/templates/_helpers.tpl

@@ -35,6 +35,7 @@ Common labels
 */}}
 {{- define "cache-registry.labels" -}}
 helm.sh/chart: {{ include "cache-registry.chart" . }}
+cache-registry.enix.io/image-caching-policy: ignore
 {{ include "cache-registry.selectorLabels" . }}
 {{- if .Chart.AppVersion }}
 app.kubernetes.io/version: {{ .Chart.AppVersion | quote }}

helm/cache-registry/templates/mutatingwebhookconfiguration.yaml

@@ -13,7 +13,14 @@ webhooks:
       name: dcr-webhook-service
       namespace: {{ .Release.Namespace }}
       path: /mutate-core-v1-pod
-  failurePolicy: Fail
+  failurePolicy: Ignore
+  objectSelector:
+    matchExpressions:
+    - key: cache-registry.enix.io/image-caching-policy
+      operator: NotIn
+      values:
+      - ignore
+    {{- .Values.proxy.webhook.objectSelector.matchExpressions | toYaml | nindent 4 }}
   name: mpod.kb.io
   rules:
   - apiGroups:

helm/cache-registry/values.yaml

@@ -31,6 +31,8 @@ proxy:
     certificateIssuerRef:
       kind: Issuer
       name: dcr-selfsigned-issuer
+    objectSelector:
+      matchExpressions: []
 
 registry:
   image: