--- apiVersion: admissionregistration.k8s.io/v1 kind: MutatingWebhookConfiguration metadata: annotations: cert-manager.io/inject-ca-from: openstack-operators/openstack-baremetal-operator-serving-cert creationTimestamp: "2026-02-19T03:37:23Z" generation: 2 labels: app.kubernetes.io/component: webhook app.kubernetes.io/created-by: openstack-operator app.kubernetes.io/instance: mutating-webhook-configuration app.kubernetes.io/managed-by: kustomize app.kubernetes.io/name: mutatingwebhookconfiguration app.kubernetes.io/part-of: openstack-baremetal-operator openstack.openstack.org/managed: "true" managedFields: - apiVersion: admissionregistration.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:webhooks: k:{"name":"mopenstackbaremetalset-v1beta1.kb.io"}: f:clientConfig: f:caBundle: {} k:{"name":"mopenstackprovisionserver-v1beta1.kb.io"}: f:clientConfig: f:caBundle: {} manager: cert-manager-cainjector operation: Update time: "2026-02-19T03:37:42Z" - apiVersion: admissionregistration.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: .: {} f:cert-manager.io/inject-ca-from: {} f:labels: .: {} f:app.kubernetes.io/component: {} f:app.kubernetes.io/created-by: {} f:app.kubernetes.io/instance: {} f:app.kubernetes.io/managed-by: {} f:app.kubernetes.io/name: {} f:app.kubernetes.io/part-of: {} f:openstack.openstack.org/managed: {} f:webhooks: .: {} k:{"name":"mopenstackbaremetalset-v1beta1.kb.io"}: .: {} f:admissionReviewVersions: {} f:clientConfig: .: {} f:service: .: {} f:name: {} f:namespace: {} f:path: {} f:port: {} f:failurePolicy: {} f:matchPolicy: {} f:name: {} f:namespaceSelector: {} f:objectSelector: {} f:reinvocationPolicy: {} f:rules: {} f:sideEffects: {} f:timeoutSeconds: {} k:{"name":"mopenstackprovisionserver-v1beta1.kb.io"}: .: {} f:admissionReviewVersions: {} f:clientConfig: .: {} f:service: .: {} f:name: {} f:namespace: {} f:path: {} f:port: {} f:failurePolicy: {} f:matchPolicy: {} f:name: {} f:namespaceSelector: {} f:objectSelector: {} f:reinvocationPolicy: {} f:rules: {} f:sideEffects: {} f:timeoutSeconds: {} manager: operator operation: Update time: "2026-02-19T03:37:42Z" name: openstack-baremetal-operator-mutating-webhook-configuration resourceVersion: "27481" uid: 226c0e8a-33b6-4394-9cb0-736a12536bd1 webhooks: - admissionReviewVersions: - v1 clientConfig: caBundle: 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 service: name: openstack-baremetal-operator-webhook-service namespace: openstack-operators path: /mutate-baremetal-openstack-org-v1beta1-openstackbaremetalset port: 443 failurePolicy: Fail matchPolicy: Equivalent name: mopenstackbaremetalset-v1beta1.kb.io namespaceSelector: {} objectSelector: {} reinvocationPolicy: Never rules: - apiGroups: - baremetal.openstack.org apiVersions: - v1beta1 operations: - CREATE - UPDATE resources: - openstackbaremetalsets scope: '*' sideEffects: None timeoutSeconds: 10 - admissionReviewVersions: - v1 clientConfig: caBundle: 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 service: name: openstack-baremetal-operator-webhook-service namespace: openstack-operators path: /mutate-baremetal-openstack-org-v1beta1-openstackprovisionserver port: 443 failurePolicy: Fail matchPolicy: Equivalent name: mopenstackprovisionserver-v1beta1.kb.io namespaceSelector: {} objectSelector: {} reinvocationPolicy: Never rules: - apiGroups: - baremetal.openstack.org apiVersions: - v1beta1 operations: - CREATE - UPDATE resources: - openstackprovisionservers scope: '*' sideEffects: None timeoutSeconds: 10