apiVersion: admissionregistration.k8s.io/v1 kind: MutatingWebhookConfiguration metadata: annotations: creationTimestamp: "2025-10-14T13:30:08Z" generation: 4 labels: app: kubernetes-nmstate name: nmstate ownerReferences: - apiVersion: nmstate.io/v1 blockOwnerDeletion: true controller: true kind: NMState name: nmstate uid: 7ff22127-e408-4e58-a3b8-e26f260012e3 resourceVersion: "34067" uid: 26c4098f-7194-4018-bf47-fcb710d342f0 webhooks: - admissionReviewVersions: - v1 - v1beta1 clientConfig: service: name: nmstate-webhook namespace: openshift-nmstate path: /nodenetworkconfigurationpolicies-mutate port: 443 failurePolicy: Fail matchPolicy: Equivalent name: nodenetworkconfigurationpolicies-mutate.nmstate.io namespaceSelector: {} objectSelector: {} reinvocationPolicy: Never rules: - apiGroups: - '*' apiVersions: - v1alpha1 - v1beta1 - v1 operations: - CREATE - UPDATE resources: - nodenetworkconfigurationpolicies scope: '*' sideEffects: None timeoutSeconds: 10 - admissionReviewVersions: - v1 - v1beta1 clientConfig: service: name: nmstate-webhook namespace: openshift-nmstate path: /nodenetworkconfigurationpolicies-status-mutate port: 443 failurePolicy: Fail matchPolicy: Equivalent name: nodenetworkconfigurationpolicies-status-mutate.nmstate.io namespaceSelector: {} objectSelector: {} reinvocationPolicy: Never rules: - apiGroups: - '*' apiVersions: - v1alpha1 - v1beta1 - v1 operations: - CREATE - UPDATE resources: - nodenetworkconfigurationpolicies/status scope: '*' sideEffects: None timeoutSeconds: 10 - admissionReviewVersions: - v1 - v1beta1 clientConfig: service: name: nmstate-webhook namespace: openshift-nmstate path: /nodenetworkconfigurationpolicies-timestamp-mutate port: 443 failurePolicy: Fail matchPolicy: Equivalent name: nodenetworkconfigurationpolicies-timestamp-mutate.nmstate.io namespaceSelector: {} objectSelector: {} reinvocationPolicy: Never rules: - apiGroups: - '*' apiVersions: - v1alpha1 - v1beta1 - v1 operations: - CREATE - UPDATE resources: - nodenetworkconfigurationpolicies - nodenetworkconfigurationpolicies/status scope: '*' sideEffects: None timeoutSeconds: 10 - admissionReviewVersions: - v1 - v1beta1 clientConfig: service: name: nmstate-webhook namespace: openshift-nmstate path: /nodenetworkconfigurationpolicies-update-validate port: 443 failurePolicy: Fail matchPolicy: Equivalent name: nodenetworkconfigurationpolicies-update-validate.nmstate.io namespaceSelector: {} objectSelector: {} reinvocationPolicy: Never rules: - apiGroups: - '*' apiVersions: - v1alpha1 - v1beta1 - v1 operations: - UPDATE resources: - nodenetworkconfigurationpolicies scope: '*' sideEffects: None timeoutSeconds: 10 - admissionReviewVersions: - v1 - v1beta1 clientConfig: service: name: nmstate-webhook namespace: openshift-nmstate path: /nodenetworkconfigurationpolicies-create-validate port: 443 failurePolicy: Fail matchPolicy: Equivalent name: nodenetworkconfigurationpolicies-create-validate.nmstate.io namespaceSelector: {} objectSelector: {} reinvocationPolicy: Never rules: - apiGroups: - '*' apiVersions: - v1alpha1 - v1beta1 - v1 operations: - CREATE resources: - nodenetworkconfigurationpolicies scope: '*' sideEffects: None timeoutSeconds: 10