apiVersion: admissionregistration.k8s.io/v1 kind: MutatingWebhookConfiguration metadata: annotations: cert-manager.io/inject-ca-from: openstack-operators/openstack-baremetal-operator-serving-cert creationTimestamp: "2025-12-04T00:59:55Z" generation: 2 labels: app.kubernetes.io/component: webhook app.kubernetes.io/created-by: openstack-operator app.kubernetes.io/instance: mutating-webhook-configuration app.kubernetes.io/managed-by: kustomize app.kubernetes.io/name: mutatingwebhookconfiguration app.kubernetes.io/part-of: openstack-baremetal-operator openstack.openstack.org/managed: "true" name: openstack-baremetal-operator-mutating-webhook-configuration resourceVersion: "26775" uid: e18cdd83-a0c1-42a0-bff3-370a9a9beb77 webhooks: - admissionReviewVersions: - v1 clientConfig: service: name: openstack-baremetal-operator-webhook-service namespace: openstack-operators path: /mutate-baremetal-openstack-org-v1beta1-openstackbaremetalset port: 443 failurePolicy: Fail matchPolicy: Equivalent name: mopenstackbaremetalset-v1beta1.kb.io namespaceSelector: {} objectSelector: {} reinvocationPolicy: Never rules: - apiGroups: - baremetal.openstack.org apiVersions: - v1beta1 operations: - CREATE - UPDATE resources: - openstackbaremetalsets scope: '*' sideEffects: None timeoutSeconds: 10 - admissionReviewVersions: - v1 clientConfig: service: name: openstack-baremetal-operator-webhook-service namespace: openstack-operators path: /mutate-baremetal-openstack-org-v1beta1-openstackprovisionserver port: 443 failurePolicy: Fail matchPolicy: Equivalent name: mopenstackprovisionserver-v1beta1.kb.io namespaceSelector: {} objectSelector: {} reinvocationPolicy: Never rules: - apiGroups: - baremetal.openstack.org apiVersions: - v1beta1 operations: - CREATE - UPDATE resources: - openstackprovisionservers scope: '*' sideEffects: None timeoutSeconds: 10