Add kubeflow/v1.10.0

charts/kubeflow/apps/katib/upstream/components/webhook/webhooks.yaml

@@ -9,7 +9,6 @@ webhooks:
     admissionReviewVersions:
       - v1
     clientConfig:
-      caBundle: Cg==
       service:
         name: katib-controller
         namespace: kubeflow
@@ -35,7 +34,6 @@ webhooks:
     admissionReviewVersions:
       - v1
     clientConfig:
-      caBundle: Cg==
       service:
         name: katib-controller
         namespace: kubeflow
@@ -55,7 +53,6 @@ webhooks:
     admissionReviewVersions:
       - v1
     clientConfig:
-      caBundle: Cg==
       service:
         name: katib-controller
         namespace: kubeflow
@@ -63,16 +60,9 @@ webhooks:
     namespaceSelector:
       matchLabels:
         katib.kubeflow.org/metrics-collector-injection: enabled
-    # Once the AdmissionWebhookMatchConditions feature gate is enabled by default, we should switch to control based on userInfo.
-    # REF:
-    # - AdmissionWebhookMatchConditions: https://kubernetes.io/docs/reference/access-authn-authz/extensible-admission-controllers/#matching-requests-matchconditions
-    # - Tracking issue: https://github.com/kubeflow/katib/issues/2206
-    objectSelector:
-      matchExpressions:
-        - key: katib.kubeflow.org/metrics-collector-injection
-          operator: NotIn
-          values:
-            - disabled
+    matchConditions:
+      - name: 'exclude-katib-controller'
+        expression: 'request.userInfo.username != "system:serviceaccount:kubeflow:katib-controller"'
     rules:
       - apiGroups:
           - ""