fix: Only select Deployment in Service

Co-authored-by: Sebastian Bernauer <sebastian.bernauer@stackable.tech>

Author: Techassi

deploy/helm/secret-operator/templates/controller-deployment.yaml

@@ -17,6 +17,8 @@ spec:
           {{- toYaml . | nindent 8 }}
         {{- end }}
       labels:
+        # TODO (@Techassi): Gate this behind the maintance.customResourceDefinition.maintain field
+        webhook.stackable.tech/conversion: enabled
         {{- include "operator.selectorLabels" . | nindent 8 }}
     spec:
       {{- with .Values.image.pullSecrets }}
@@ -48,6 +50,8 @@ spec:
             # (which is turn pulls in https://github.com/stackabletech/operator-rs/blob/main/crates/stackable-operator/src/cli.rs)
             # You can read there about the expected values and purposes.
 
+            # TODO (@Techassi): Gate the DISABLE_CRD_MAINTENANCE env var behind maintance.customResourceDefinition.maintain field
+
             # Sometimes products need to know the operator image, e.g. the opa-bundle-builder OPA
             # sidecar uses the operator image.
             - name: OPERATOR_IMAGE

deploy/helm/secret-operator/templates/service.yaml

@@ -1,4 +1,3 @@
-
 ---
 apiVersion: v1
 kind: Service
@@ -11,7 +10,9 @@ metadata:
     {{- include "operator.labels" . | nindent 4 }}
 spec:
   selector:
-    {{- include "operator.selectorLabels" . | nindent 6 }}
+    # TODO (@Techassi): Gate this behind the maintance.customResourceDefinition.maintain field
+    webhook.stackable.tech/conversion: enabled
+    {{- include "operator.selectorLabels" . | nindent 4 }}
   ports:
     - name: conversion-webhook
       protocol: TCP