We would like to be able to inject sidecars inside kube-system namespace. Currently kube-system is hardcoded to be ignored: https://github.com/tumblr/k8s-sidecar-injector/blob/master/pkg/server/webhook.go#L81-L84

I guess this serves as protection from borking your cluster, but the controller fails open, so at worst it would slow down Pods starting in kube-system.

Is this something you would be open to having as a flag with current defaults, to allow setting an empty list?

Am I missing something more critical why kube-system and kube-public are ignored?

Thanks!