apiVersion: admissionregistration.k8s.io/v1
kind: ValidatingWebhookConfiguration
metadata:
  annotations:
    cert-manager.io/inject-ca-from: openstack-operators/openstack-baremetal-operator-serving-cert
  creationTimestamp: "2025-12-03T14:41:11Z"
  generation: 2
  labels:
    app.kubernetes.io/component: webhook
    app.kubernetes.io/created-by: openstack-operator
    app.kubernetes.io/instance: validating-webhook-configuration
    app.kubernetes.io/managed-by: kustomize
    app.kubernetes.io/name: validatingwebhookconfiguration
    app.kubernetes.io/part-of: openstack-baremetal-operator
    openstack.openstack.org/managed: "true"
  name: openstack-baremetal-operator-validating-webhook-configuration
  resourceVersion: "31877"
  uid: 1c39cae1-a5cf-4065-8386-6d2df87067b9
webhooks:
- admissionReviewVersions:
  - v1
  clientConfig:
    caBundle: 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
    service:
      name: openstack-baremetal-operator-webhook-service
      namespace: openstack-operators
      path: /validate-baremetal-openstack-org-v1beta1-openstackbaremetalset
      port: 443
  failurePolicy: Fail
  matchPolicy: Equivalent
  name: vopenstackbaremetalset-v1beta1.kb.io
  namespaceSelector: {}
  objectSelector: {}
  rules:
  - apiGroups:
    - baremetal.openstack.org
    apiVersions:
    - v1beta1
    operations:
    - CREATE
    - UPDATE
    resources:
    - openstackbaremetalsets
    scope: '*'
  sideEffects: None
  timeoutSeconds: 10
- admissionReviewVersions:
  - v1
  clientConfig:
    caBundle: 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
    service:
      name: openstack-baremetal-operator-webhook-service
      namespace: openstack-operators
      path: /validate-baremetal-openstack-org-v1beta1-openstackprovisionserver
      port: 443
  failurePolicy: Fail
  matchPolicy: Equivalent
  name: vopenstackprovisionserver-v1beta1.kb.io
  namespaceSelector: {}
  objectSelector: {}
  rules:
  - apiGroups:
    - baremetal.openstack.org
    apiVersions:
    - v1beta1
    operations:
    - CREATE
    - UPDATE
    resources:
    - openstackprovisionservers
    scope: '*'
  sideEffects: None
  timeoutSeconds: 10