Alternative to disabling webhooks inside the linkerd namespace

[sysarch-repo]

In case linkerd must be installed in a customer pre-defined namespace that does not allow additional labels, can the disabling of the webhooks for the linkerd components be simply added as an expression in the webhook config?
Example:

    namespaceSelector:
      matchExpressions:
      - key: config.linkerd.io/admission-webhooks
        operator: NotIn
        values:
        - disabled
      - key: "name"
        operator: "NotIn"
        values:
        - <linkerd-namespace>

[alpeb]

Yes you can do that. Although it's not necessary really. The linkerd components will already be injected at install time, and when the injector webhook catches their pod creation event, it'll see they're already injected and so will simply leave them alone.

[sysarch-repo]

@alpeb thanks for your answer and the helpful insight!

BTW I cannot mark your suggested answers as "answer" in any of the browsers I am using. There is a pop up on the page saying "Marking answers" and some text with the "Got it!" button that cannot be clicked to make the popup disappear. This popup probably also makes the "Mark as answer" button on your comment not reacting to my clicks. I feel really sorry I cannot do this mark that would also give you the points / credit you deserve.

[alpeb]

Huh not surprised it'd be a GH bug. I've just marked the answer 😉