apiVersion: admissionregistration.k8s.io/v1
kind: ValidatingWebhookConfiguration
metadata:
  annotations:
    cert-manager.io/inject-ca-from-secret: cert-manager/cert-manager-webhook-ca
  creationTimestamp: "2025-12-03T22:17:00Z"
  generation: 2
  labels:
    app: webhook
    app.kubernetes.io/component: webhook
    app.kubernetes.io/instance: cert-manager
    app.kubernetes.io/name: webhook
    app.kubernetes.io/version: v1.18.3
  name: cert-manager-webhook
  resourceVersion: "21578"
  uid: a652af6e-7de8-4644-93a2-b2d65ba8a2ca
webhooks:
- admissionReviewVersions:
  - v1
  clientConfig:
    caBundle: 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
    service:
      name: cert-manager-webhook
      namespace: cert-manager
      path: /validate
      port: 443
  failurePolicy: Fail
  matchPolicy: Equivalent
  name: webhook.cert-manager.io
  namespaceSelector:
    matchExpressions:
    - key: cert-manager.io/disable-validation
      operator: NotIn
      values:
      - "true"
  objectSelector: {}
  rules:
  - apiGroups:
    - cert-manager.io
    - acme.cert-manager.io
    apiVersions:
    - v1
    operations:
    - CREATE
    - UPDATE
    resources:
    - '*/*'
    scope: '*'
  sideEffects: None
  timeoutSeconds: 30