tortoise-mutating-webhook-configuration Intercepting resources in the kube-system namespace

[nadeemhussain]

we are using tortoise in gke cluster, but getting this warning
tortoise-mutating-webhook-configuration Intercepting resources in the kube-system namespace,

This cluster has an admission webhook installed that is intercepting system critical requests in the last 24 hours. Intercepting these requests can impact availability of the GKE Control Plane

how can i avoid this, possibly to restrict only to specifc namespace , it dosn't have to read all ns

[sanposhiho]

You can use -
https://kubernetes.io/docs/reference/access-authn-authz/extensible-admission-controllers/#matching-requests-namespaceselector

[nadeemhussain]

this works for sure, i was able to add a rule directly in the manifest to avoid kube-system , but if we generate these files do we support this as a parameter