apiVersion: admissionregistration.k8s.io/v1
kind: MutatingWebhookConfiguration
metadata:
  annotations:
  creationTimestamp: "2026-04-02T13:54:16Z"
  generation: 2
  labels:
    app: kubernetes-nmstate
  name: nmstate
  ownerReferences:
  - apiVersion: nmstate.io/v1
    blockOwnerDeletion: true
    controller: true
    kind: NMState
    name: nmstate
    uid: 210b2bef-7bdf-4bce-b8f4-ec7da2e5942a
  resourceVersion: "34227"
  uid: 33694a04-f9b3-4f78-a092-5e271e297af9
webhooks:
- admissionReviewVersions:
  - v1
  - v1beta1
  clientConfig:
    service:
      name: nmstate-webhook
      namespace: openshift-nmstate
      path: /nodenetworkconfigurationpolicies-mutate
      port: 443
  failurePolicy: Fail
  matchPolicy: Equivalent
  name: nodenetworkconfigurationpolicies-mutate.nmstate.io
  namespaceSelector: {}
  objectSelector: {}
  reinvocationPolicy: Never
  rules:
  - apiGroups:
    - '*'
    apiVersions:
    - v1alpha1
    - v1beta1
    - v1
    operations:
    - CREATE
    - UPDATE
    resources:
    - nodenetworkconfigurationpolicies
    scope: '*'
  sideEffects: None
  timeoutSeconds: 10
- admissionReviewVersions:
  - v1
  - v1beta1
  clientConfig:
    service:
      name: nmstate-webhook
      namespace: openshift-nmstate
      path: /nodenetworkconfigurationpolicies-status-mutate
      port: 443
  failurePolicy: Fail
  matchPolicy: Equivalent
  name: nodenetworkconfigurationpolicies-status-mutate.nmstate.io
  namespaceSelector: {}
  objectSelector: {}
  reinvocationPolicy: Never
  rules:
  - apiGroups:
    - '*'
    apiVersions:
    - v1alpha1
    - v1beta1
    - v1
    operations:
    - CREATE
    - UPDATE
    resources:
    - nodenetworkconfigurationpolicies/status
    scope: '*'
  sideEffects: None
  timeoutSeconds: 10
- admissionReviewVersions:
  - v1
  - v1beta1
  clientConfig:
    service:
      name: nmstate-webhook
      namespace: openshift-nmstate
      path: /nodenetworkconfigurationpolicies-timestamp-mutate
      port: 443
  failurePolicy: Fail
  matchPolicy: Equivalent
  name: nodenetworkconfigurationpolicies-timestamp-mutate.nmstate.io
  namespaceSelector: {}
  objectSelector: {}
  reinvocationPolicy: Never
  rules:
  - apiGroups:
    - '*'
    apiVersions:
    - v1alpha1
    - v1beta1
    - v1
    operations:
    - CREATE
    - UPDATE
    resources:
    - nodenetworkconfigurationpolicies
    - nodenetworkconfigurationpolicies/status
    scope: '*'
  sideEffects: None
  timeoutSeconds: 10
- admissionReviewVersions:
  - v1
  - v1beta1
  clientConfig:
    service:
      name: nmstate-webhook
      namespace: openshift-nmstate
      path: /nodenetworkconfigurationpolicies-update-validate
      port: 443
  failurePolicy: Fail
  matchPolicy: Equivalent
  name: nodenetworkconfigurationpolicies-update-validate.nmstate.io
  namespaceSelector: {}
  objectSelector: {}
  reinvocationPolicy: Never
  rules:
  - apiGroups:
    - '*'
    apiVersions:
    - v1alpha1
    - v1beta1
    - v1
    operations:
    - UPDATE
    resources:
    - nodenetworkconfigurationpolicies
    scope: '*'
  sideEffects: None
  timeoutSeconds: 10
- admissionReviewVersions:
  - v1
  - v1beta1
  clientConfig:
    service:
      name: nmstate-webhook
      namespace: openshift-nmstate
      path: /nodenetworkconfigurationpolicies-create-validate
      port: 443
  failurePolicy: Fail
  matchPolicy: Equivalent
  name: nodenetworkconfigurationpolicies-create-validate.nmstate.io
  namespaceSelector: {}
  objectSelector: {}
  reinvocationPolicy: Never
  rules:
  - apiGroups:
    - '*'
    apiVersions:
    - v1alpha1
    - v1beta1
    - v1
    operations:
    - CREATE
    resources:
    - nodenetworkconfigurationpolicies
    scope: '*'
  sideEffects: None
  timeoutSeconds: 10