apiVersion: admissionregistration.k8s.io/v1
kind: ValidatingWebhookConfiguration
metadata:
  annotations:
    cert-manager.io/inject-ca-from: openstack-operators/openstack-baremetal-operator-serving-cert
  creationTimestamp: "2026-04-04T02:17:12Z"
  generation: 2
  labels:
    app.kubernetes.io/component: webhook
    app.kubernetes.io/created-by: openstack-operator
    app.kubernetes.io/instance: validating-webhook-configuration
    app.kubernetes.io/managed-by: kustomize
    app.kubernetes.io/name: validatingwebhookconfiguration
    app.kubernetes.io/part-of: openstack-baremetal-operator
    openstack.openstack.org/managed: "true"
  name: openstack-baremetal-operator-validating-webhook-configuration
  resourceVersion: "40216"
  uid: 621b24e4-b0b3-40c1-b42e-caed305a30a4
webhooks:
- admissionReviewVersions:
  - v1
  clientConfig:
    caBundle: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSURXekNDQWtPZ0F3SUJBZ0lVSlQxMlhIUENPcHV6cWlzRFM0T3pOV1U0SnM0d0RRWUpLb1pJaHZjTkFRRUwKQlFBd0FEQWVGdzB5TmpBME1EUXdNakUzTWpOYUZ3MHlOakEzTURNd01qRTNNak5hTUFBd2dnRWlNQTBHQ1NxRwpTSWIzRFFFQkFRVUFBNElCRHdBd2dnRUtBb0lCQVFEWGVORUxLSTNUZFcyYlNUSUFqNDI3T3ZWbWhIUGVnVHpQCjJIcjAvS1NGWlVBNkVyRFU4NDNGb1VjN2FSQk10c2dJaEdSTjJiYThqNElNRHpLdzVVWjFjeGNZQkR4c202VGcKT20wOTlUUlcvaGJrSS9FbUdnT2EwUkNJbmNRc2IrS1hmaXIwMlZEUnI5N0VCeEtXVHh2VUc3UzhQWitNa0MzMgpWNXVXdVZYY2RRWngvRmRRZUF3S1ltbEZ4UVBrbWNwREVzbkZDeklmTldXYyt2Ny84YWpMQ0I4RmV1TEk1cGlxCkoycDJHQnp4TDFuN0wyWGhXeUdPZnY4QnZvcUxGejlNVEhWVW1ueXRPQ256Unk2cElxaGpiQmFhaHFwM2ROUGYKaWJGS3JDV013MHdxWnNmMytCS2ZBYTgwVWUzaytmeHV4RHVYZkVTdVMrd3ErY1NMTjc3ckFnTUJBQUdqZ2N3dwpnY2t3RGdZRFZSMFBBUUgvQkFRREFnV2dNQXdHQTFVZEV3RUIvd1FDTUFBd2dhZ0dBMVVkRVFFQi93U0JuVENCCm1vSkViM0JsYm5OMFlXTnJMV0poY21WdFpYUmhiQzF2Y0dWeVlYUnZjaTEzWldKb2IyOXJMWE5sY25acFkyVXUKYjNCbGJuTjBZV05yTFc5d1pYSmhkRzl5Y3k1emRtT0NVbTl3Wlc1emRHRmpheTFpWVhKbGJXVjBZV3d0YjNCbApjbUYwYjNJdGQyVmlhRzl2YXkxelpYSjJhV05sTG05d1pXNXpkR0ZqYXkxdmNHVnlZWFJ2Y25NdWMzWmpMbU5zCmRYTjBaWEl1Ykc5allXd3dEUVlKS29aSWh2Y05BUUVMQlFBRGdnRUJBSnRhWDJFVEFzR29SMi85S0MwMG5JaGsKa2RlY2l1QWlEYUZRanljKzB5VU1lMGFNWnU5ZUVndXJuRU0wR0FjemQzUmtrTFgrL3FQcUo3cjJuYVZscndIRApjemtTOUdyVXRXSUN6N3lyOGw4U0lKNzFQcmlNRDFJYTh3WCtXNTAreDRZY3o1M1RjajVtMUhtdjRTZEFic1ZFCjRUK3g5NS8xazROc1JsRmxVTnFiS3JDZUtYOGo1OENoZVA5SnFkSVJUVTVXUHVMc1o4UkpUbVEyRHJEN2xGNGgKMDJpaEFhQWxaN1hUVWNEazZCSFIxZjV1RXlaWHNUN0tHS25STVluRVdFQzN0OHEyZjFUc3owYlUwTjlIV0xYZwpZRDA3aHd4SUdYME9QRkU0bFNBYlNTMXYzbE16VTZoVlVIOU40Z3p3a3RvNU1nZXRKa0J2aDIrZjl2NzY3SlE9Ci0tLS0tRU5EIENFUlRJRklDQVRFLS0tLS0K
    service:
      name: openstack-baremetal-operator-webhook-service
      namespace: openstack-operators
      path: /validate-baremetal-openstack-org-v1beta1-openstackbaremetalset
      port: 443
  failurePolicy: Fail
  matchPolicy: Equivalent
  name: vopenstackbaremetalset-v1beta1.kb.io
  namespaceSelector: {}
  objectSelector: {}
  rules:
  - apiGroups:
    - baremetal.openstack.org
    apiVersions:
    - v1beta1
    operations:
    - CREATE
    - UPDATE
    resources:
    - openstackbaremetalsets
    scope: '*'
  sideEffects: None
  timeoutSeconds: 10
- admissionReviewVersions:
  - v1
  clientConfig:
    caBundle: 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
    service:
      name: openstack-baremetal-operator-webhook-service
      namespace: openstack-operators
      path: /validate-baremetal-openstack-org-v1beta1-openstackprovisionserver
      port: 443
  failurePolicy: Fail
  matchPolicy: Equivalent
  name: vopenstackprovisionserver-v1beta1.kb.io
  namespaceSelector: {}
  objectSelector: {}
  rules:
  - apiGroups:
    - baremetal.openstack.org
    apiVersions:
    - v1beta1
    operations:
    - CREATE
    - UPDATE
    resources:
    - openstackprovisionservers
    scope: '*'
  sideEffects: None
  timeoutSeconds: 10