Webhook namespace selectors

If you install ECK through the Helm chart, you can now set namespaceSelector and objectSelector on the webhook. The webhook name is generated as <operator-name>.<operator-namespace>.k8s.elastic.co so that multiple operators can be installed side-by-side in the same cluster.

This can be useful in large and busy clusters, where you might want to divide the set of namespaces across several operators to speed up reconciliation times and reduce the amount of resources required per operator.

Webhook resources are cluster-scoped, therefore createClusterScopedResources must be set to true when installing the chart. This means that each operator gets a ClusterRole that applies to the whole cluster and not just the set of namespaces it is configured to manage. This approach is suitable only if you want to do load-splitting in a trusted cluster.

For more information, see Configure the validating webhook and Dynamic Admission Control.