kubevirt / hyperconverged-cluster-operator / 29021541176

82%

push

github

netresinjector: Use objectSelector for virt-launcher filtering (#4388)

The CEL matchCondition accessed object.metadata.labels["kubevirt.io"]
without checking if the key exists, causing a runtime error on pods
that lack the label. Replace with an objectSelector using matchLabels
to filter for virt-launcher pods at the API server's request-matching
stage instead (also more efficient since the API server skips the
webhook call entirely rather than invoking it and evaluating CEL).

Reproducer - any pod with the networks annotation:
```yaml
  apiVersion: v1
  kind: Pod
  metadata:
    name: reproducer
    annotations:
      k8s.v1.cni.cncf.io/networks: net1
    labels:
      foo: bar
  spec:
    containers:
      - name: test
        image: busybox
```

Signed-off-by: Alex Kalenyuk <akalenyu@redhat.com>
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>

5 of 5 new or added lines in 1 file covered. (100.0%)

11314 of 13877 relevant lines covered (81.53%)

2.18 hits per line