--- apiVersion: admissionregistration.k8s.io/v1 kind: ValidatingWebhookConfiguration metadata: annotations: capability.openshift.io/name: MachineAPI exclude.release.openshift.io/internal-openshift-hosted: "true" include.release.openshift.io/self-managed-high-availability: "true" service.beta.openshift.io/inject-cabundle: "true" creationTimestamp: "2026-02-16T21:10:54Z" generation: 2 managedFields: - apiVersion: admissionregistration.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: .: {} f:capability.openshift.io/name: {} f:exclude.release.openshift.io/internal-openshift-hosted: {} f:include.release.openshift.io/self-managed-high-availability: {} f:service.beta.openshift.io/inject-cabundle: {} f:ownerReferences: .: {} k:{"uid":"c4d9ae9e-7665-49cc-8a39-4572a3c989d3"}: {} f:webhooks: .: {} k:{"name":"controlplanemachineset.machine.openshift.io"}: .: {} f:admissionReviewVersions: {} f:clientConfig: .: {} f:service: .: {} f:name: {} f:namespace: {} f:path: {} f:port: {} f:failurePolicy: {} f:matchPolicy: {} f:name: {} f:namespaceSelector: {} f:objectSelector: {} f:rules: {} f:sideEffects: {} f:timeoutSeconds: {} manager: cluster-version-operator operation: Update time: "2026-02-16T21:10:54Z" - apiVersion: admissionregistration.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:webhooks: k:{"name":"controlplanemachineset.machine.openshift.io"}: f:clientConfig: f:caBundle: {} manager: service-ca-operator operation: Update time: "2026-02-16T21:15:29Z" name: controlplanemachineset.machine.openshift.io ownerReferences: - apiVersion: config.openshift.io/v1 controller: true kind: ClusterVersion name: version uid: c4d9ae9e-7665-49cc-8a39-4572a3c989d3 resourceVersion: "11958" uid: 08e30c5e-7965-4794-9f6d-46b8a36dc240 webhooks: - admissionReviewVersions: - v1 clientConfig: caBundle: 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 service: name: control-plane-machine-set-operator namespace: openshift-machine-api path: /validate-machine-openshift-io-v1-controlplanemachineset port: 9443 failurePolicy: Fail matchPolicy: Equivalent name: controlplanemachineset.machine.openshift.io namespaceSelector: {} objectSelector: {} rules: - apiGroups: - machine.openshift.io apiVersions: - v1 operations: - CREATE - UPDATE resources: - controlplanemachinesets scope: '*' sideEffects: None timeoutSeconds: 10