windows-gmsa
                                
                                
                                
                                    windows-gmsa copied to clipboard
                            
                            
                            
                        start CEL webhook matchConditions
fixed this internally a while back in response to https://github.com/kubernetes-sigs/windows-gmsa/issues/148
inserts webhook match conditions such that gmsa doesn't intercept every pod, only those relevant to windows securfity contexts.
extends values to override kubernetes server version. CEL is 1.30+, in my case the client was targeting various clusters thus Capabilities.KubeVersion wasn't reliable.