[Feature] Dynamic Helm Webhook Selectors
Author: Vaishnav88skCreated Jul 6, 2026Updated Jul 20, 2026
Labelskind/feature
What do you want to happen?
Make namespaceSelector and objectSelector dynamically configurable in the helm/v2-alpha plugin for Validating and Mutating Webhooks via values.yaml.
Describe the feature you want, and what the motivation is.
Currently, the generated Helm webhooks use static selectors. Making these selectors dynamic in values.yaml allows easier deployment overrides without developers needing to maintain a custom chart fork or rely on post-render patching.
What are your use cases? Why should we do this?
- Safety & Multi-tenancy: Enterprise cluster admins rarely allow webhooks to intercept globally without strict
namespaceSelectors(e.g., explicitly ignoringkube-system). Dynamic Helm selectors allow users to safely restrict webhook scopes at deploy time based on their cluster's requirements.
Does it require a particular Kubernetes version?
No, it relies on the standard admissionregistration.k8s.io/v1 API.
Is there currently another issue associated with this (use github syntax like #xyz to link to it)?
No.
Extra Labels
No response
Source: kubernetes-sigs/kubebuilder