apiVersion: admissionregistration.k8s.io/v1 kind: MutatingWebhookConfiguration metadata: annotations: creationTimestamp: "2025-12-04T00:57:16Z" generation: 2 labels: app: kubernetes-nmstate name: nmstate ownerReferences: - apiVersion: nmstate.io/v1 blockOwnerDeletion: true controller: true kind: NMState name: nmstate uid: c2a786f0-0778-4ff4-ba86-5b6814c113fd resourceVersion: "23360" uid: 6edec680-0ab2-4217-811f-8269044a3ff8 webhooks: - admissionReviewVersions: - v1 - v1beta1 clientConfig: service: name: nmstate-webhook namespace: openshift-nmstate path: /nodenetworkconfigurationpolicies-mutate port: 443 failurePolicy: Fail matchPolicy: Equivalent name: nodenetworkconfigurationpolicies-mutate.nmstate.io namespaceSelector: {} objectSelector: {} reinvocationPolicy: Never rules: - apiGroups: - '*' apiVersions: - v1alpha1 - v1beta1 - v1 operations: - CREATE - UPDATE resources: - nodenetworkconfigurationpolicies scope: '*' sideEffects: None timeoutSeconds: 10 - admissionReviewVersions: - v1 - v1beta1 clientConfig: service: name: nmstate-webhook namespace: openshift-nmstate path: /nodenetworkconfigurationpolicies-status-mutate port: 443 failurePolicy: Fail matchPolicy: Equivalent name: nodenetworkconfigurationpolicies-status-mutate.nmstate.io namespaceSelector: {} objectSelector: {} reinvocationPolicy: Never rules: - apiGroups: - '*' apiVersions: - v1alpha1 - v1beta1 - v1 operations: - CREATE - UPDATE resources: - nodenetworkconfigurationpolicies/status scope: '*' sideEffects: None timeoutSeconds: 10 - admissionReviewVersions: - v1 - v1beta1 clientConfig: service: name: nmstate-webhook namespace: openshift-nmstate path: /nodenetworkconfigurationpolicies-timestamp-mutate port: 443 failurePolicy: Fail matchPolicy: Equivalent name: nodenetworkconfigurationpolicies-timestamp-mutate.nmstate.io namespaceSelector: {} objectSelector: {} reinvocationPolicy: Never rules: - apiGroups: - '*' apiVersions: - v1alpha1 - v1beta1 - v1 operations: - CREATE - UPDATE resources: - nodenetworkconfigurationpolicies - nodenetworkconfigurationpolicies/status scope: '*' sideEffects: None timeoutSeconds: 10 - admissionReviewVersions: - v1 - v1beta1 clientConfig: service: name: nmstate-webhook namespace: openshift-nmstate path: /nodenetworkconfigurationpolicies-update-validate port: 443 failurePolicy: Fail matchPolicy: Equivalent name: nodenetworkconfigurationpolicies-update-validate.nmstate.io namespaceSelector: {} objectSelector: {} reinvocationPolicy: Never rules: - apiGroups: - '*' apiVersions: - v1alpha1 - v1beta1 - v1 operations: - UPDATE resources: - nodenetworkconfigurationpolicies scope: '*' sideEffects: None timeoutSeconds: 10 - admissionReviewVersions: - v1 - v1beta1 clientConfig: service: name: nmstate-webhook namespace: openshift-nmstate path: /nodenetworkconfigurationpolicies-create-validate port: 443 failurePolicy: Fail matchPolicy: Equivalent name: nodenetworkconfigurationpolicies-create-validate.nmstate.io namespaceSelector: {} objectSelector: {} reinvocationPolicy: Never rules: - apiGroups: - '*' apiVersions: - v1alpha1 - v1beta1 - v1 operations: - CREATE resources: - nodenetworkconfigurationpolicies scope: '*' sideEffects: None timeoutSeconds: 10