[stable/opa] add namespace selector to OPA webhook resource and bump … (#13508)

* stable/opa:  add namespace selector to OPA webhook resource and bump version

Signed-off-by: Casey Lee <cplee@nektos.com>

* stable/opa: update namespace label to be 'opt-out' vs 'opt-in'

Signed-off-by: Casey Lee <cplee@nektos.com>

stable/opa/Chart.yaml

@@ -6,7 +6,7 @@ keywords:
 - opa
 - admission control
 - policy
-version: 1.4.1
+version: 1.4.2
 home: https://www.openpolicyagent.org
 icon: https://raw.githubusercontent.com/open-policy-agent/opa/master/logo/logo.png
 sources:

stable/opa/templates/webhookconfiguration.yaml

@@ -13,6 +13,9 @@ metadata:
 {{ include "opa.labels.standard" . | indent 4 }}
 webhooks:
   - name: webhook.openpolicyagent.org
+    namespaceSelector:
+      matchExpressions:
+        - {key: openpolicyagent.org/webhook, operator: NotIn, values: [ignore]}
     failurePolicy: {{ .Values.admissionControllerFailurePolicy }}
     rules:
 {{ toYaml .Values.admissionControllerRules | indent 6 }}