--- apiVersion: admissionregistration.k8s.io/v1 kind: MutatingWebhookConfiguration metadata: annotations: cert-manager.io/inject-ca-from: openstack-operators/openstack-baremetal-operator-serving-cert creationTimestamp: "2026-03-12T18:43:46Z" generation: 2 labels: app.kubernetes.io/component: webhook app.kubernetes.io/created-by: openstack-operator app.kubernetes.io/instance: mutating-webhook-configuration app.kubernetes.io/managed-by: kustomize app.kubernetes.io/name: mutatingwebhookconfiguration app.kubernetes.io/part-of: openstack-baremetal-operator openstack.openstack.org/managed: "true" managedFields: - apiVersion: admissionregistration.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:webhooks: k:{"name":"mopenstackbaremetalset-v1beta1.kb.io"}: f:clientConfig: f:caBundle: {} k:{"name":"mopenstackprovisionserver-v1beta1.kb.io"}: f:clientConfig: f:caBundle: {} manager: cert-manager-cainjector operation: Update time: "2026-03-12T18:44:01Z" - apiVersion: admissionregistration.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: .: {} f:cert-manager.io/inject-ca-from: {} f:labels: .: {} f:app.kubernetes.io/component: {} f:app.kubernetes.io/created-by: {} f:app.kubernetes.io/instance: {} f:app.kubernetes.io/managed-by: {} f:app.kubernetes.io/name: {} f:app.kubernetes.io/part-of: {} f:openstack.openstack.org/managed: {} f:webhooks: .: {} k:{"name":"mopenstackbaremetalset-v1beta1.kb.io"}: .: {} f:admissionReviewVersions: {} f:clientConfig: .: {} f:service: .: {} f:name: {} f:namespace: {} f:path: {} f:port: {} f:failurePolicy: {} f:matchPolicy: {} f:name: {} f:namespaceSelector: {} f:objectSelector: {} f:reinvocationPolicy: {} f:rules: {} f:sideEffects: {} f:timeoutSeconds: {} k:{"name":"mopenstackprovisionserver-v1beta1.kb.io"}: .: {} f:admissionReviewVersions: {} f:clientConfig: .: {} f:service: .: {} f:name: {} f:namespace: {} f:path: {} f:port: {} f:failurePolicy: {} f:matchPolicy: {} f:name: {} f:namespaceSelector: {} f:objectSelector: {} f:reinvocationPolicy: {} f:rules: {} f:sideEffects: {} f:timeoutSeconds: {} manager: operator operation: Update time: "2026-03-12T18:44:14Z" name: openstack-baremetal-operator-mutating-webhook-configuration resourceVersion: "26352" uid: 2466cfd2-82dc-4cf5-b976-9f50f8f00283 webhooks: - admissionReviewVersions: - v1 clientConfig: caBundle: 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 service: name: openstack-baremetal-operator-webhook-service namespace: openstack-operators path: /mutate-baremetal-openstack-org-v1beta1-openstackbaremetalset port: 443 failurePolicy: Fail matchPolicy: Equivalent name: mopenstackbaremetalset-v1beta1.kb.io namespaceSelector: {} objectSelector: {} reinvocationPolicy: Never rules: - apiGroups: - baremetal.openstack.org apiVersions: - v1beta1 operations: - CREATE - UPDATE resources: - openstackbaremetalsets scope: '*' sideEffects: None timeoutSeconds: 10 - admissionReviewVersions: - v1 clientConfig: caBundle: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSURWekNDQWorZ0F3SUJBZ0lRZHhvbmRpbmt0dE9BamdnbG43eXpqekFOQmdrcWhraUc5dzBCQVFzRkFEQUEKTUI0WERUSTJNRE14TWpFNE5ETTFPVm9YRFRJMk1EWXhNREU0TkRNMU9Wb3dBRENDQVNJd0RRWUpLb1pJaHZjTgpBUUVCQlFBRGdnRVBBRENDQVFvQ2dnRUJBTjRUODdiUnlqcTVTUkU4NDBYSVpTdnY2OSt4UEpwdmJrNjZvblZDCmlENzNtSXIxMGRMejNqK2FRSlJkZ296SHNnc0F3bXRHM1R2MjBXb0tOcHFDSGlFbm1COGpkcDVwK2lNc2Z5VDkKNjMvckpycG9sZVJqRWgvRHYraG8vN3lyZmFkOTY5eC9vNjQ2MmNXNS9CenlnTkZVYytYZURHSVF6d0k4UlBxeApwYlg0bWduRGxUdG1xU0RtNWNjall4cUJBOWZMMTRvOHR0VDZOaE9CNXhvRFVqQ0YxbmE2L2JRajFKQ1dPYzZzCmw3bjNjRFFUdC9BcmtYcnRsUnlSQXUrekJPaVREYTZSVkVHN2ZyVElKRmdMQmRiaWVlRURqTVppekV4WEIwTDkKV1Q4Q0N4R2xZTjVGUUhsbjFabDIya0R1TndVLzNiZnlCU0k4YzJTeWR3b2VaOGNDQXdFQUFhT0J6RENCeVRBTwpCZ05WSFE4QkFmOEVCQU1DQmFBd0RBWURWUjBUQVFIL0JBSXdBRENCcUFZRFZSMFJBUUgvQklHZE1JR2Fna1J2CmNHVnVjM1JoWTJzdFltRnlaVzFsZEdGc0xXOXdaWEpoZEc5eUxYZGxZbWh2YjJzdGMyVnlkbWxqWlM1dmNHVnUKYzNSaFkyc3RiM0JsY21GMGIzSnpMbk4yWTRKU2IzQmxibk4wWVdOckxXSmhjbVZ0WlhSaGJDMXZjR1Z5WVhSdgpjaTEzWldKb2IyOXJMWE5sY25acFkyVXViM0JsYm5OMFlXTnJMVzl3WlhKaGRHOXljeTV6ZG1NdVkyeDFjM1JsCmNpNXNiMk5oYkRBTkJna3Foa2lHOXcwQkFRc0ZBQU9DQVFFQXJGMGtVM0t5S05HR3EvSktvMnFyWTdZb010MzgKcktCU0pscXJDUitmajNLUzlYRUNzSHZER20xeXZZcmZ2SDBST3RBbUZ2YVVpTG1IdE5JK3k3NTAvTmVNVysxbgpsYXB0OGhDa2VMUXBkNFY2Smc5ZGdqendvR1h3Q3RiUmdMcC8rL1FPVGNFempHZ0xFTGU3SUUyOEJTZFdpbWpMClR0RGRzZzJCRlA3TkpBYys4Y294UWNRK2Nhb20xUDU3cm9lTGdwTkd0dXp4M2Q1OVZSTW4wRkMyVzRZbzMvSWcKVWZyZzZIVjUyenpKUm5hYWh4VHQ5TnkrZmpvRjNiSkVobTV2VW5JT0hwNWk4TlhJbjhZSFpqMDJPQnROQ2FsSgpYNld6L1RmWE5ZK2NZb1JHanIvVEo0MzI5T3RWQVc1MksyS3B0M3h4RjloNHZjZFNrVlFOWlg4UVN3PT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo= service: name: openstack-baremetal-operator-webhook-service namespace: openstack-operators path: /mutate-baremetal-openstack-org-v1beta1-openstackprovisionserver port: 443 failurePolicy: Fail matchPolicy: Equivalent name: mopenstackprovisionserver-v1beta1.kb.io namespaceSelector: {} objectSelector: {} reinvocationPolicy: Never rules: - apiGroups: - baremetal.openstack.org apiVersions: - v1beta1 operations: - CREATE - UPDATE resources: - openstackprovisionservers scope: '*' sideEffects: None timeoutSeconds: 10