apiVersion: admissionregistration.k8s.io/v1
kind: ValidatingWebhookConfiguration
metadata:
  annotations:
    cert-manager.io/inject-ca-from: openstack-operators/openstack-baremetal-operator-serving-cert
  creationTimestamp: "2026-04-02T13:57:10Z"
  generation: 2
  labels:
    app.kubernetes.io/component: webhook
    app.kubernetes.io/created-by: openstack-operator
    app.kubernetes.io/instance: validating-webhook-configuration
    app.kubernetes.io/managed-by: kustomize
    app.kubernetes.io/name: validatingwebhookconfiguration
    app.kubernetes.io/part-of: openstack-baremetal-operator
    openstack.openstack.org/managed: "true"
  name: openstack-baremetal-operator-validating-webhook-configuration
  resourceVersion: "38611"
  uid: a534ee66-145b-4eb5-8d31-367215142d01
webhooks:
- admissionReviewVersions:
  - v1
  clientConfig:
    caBundle: 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
    service:
      name: openstack-baremetal-operator-webhook-service
      namespace: openstack-operators
      path: /validate-baremetal-openstack-org-v1beta1-openstackbaremetalset
      port: 443
  failurePolicy: Fail
  matchPolicy: Equivalent
  name: vopenstackbaremetalset-v1beta1.kb.io
  namespaceSelector: {}
  objectSelector: {}
  rules:
  - apiGroups:
    - baremetal.openstack.org
    apiVersions:
    - v1beta1
    operations:
    - CREATE
    - UPDATE
    resources:
    - openstackbaremetalsets
    scope: '*'
  sideEffects: None
  timeoutSeconds: 10
- admissionReviewVersions:
  - v1
  clientConfig:
    caBundle: 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
    service:
      name: openstack-baremetal-operator-webhook-service
      namespace: openstack-operators
      path: /validate-baremetal-openstack-org-v1beta1-openstackprovisionserver
      port: 443
  failurePolicy: Fail
  matchPolicy: Equivalent
  name: vopenstackprovisionserver-v1beta1.kb.io
  namespaceSelector: {}
  objectSelector: {}
  rules:
  - apiGroups:
    - baremetal.openstack.org
    apiVersions:
    - v1beta1
    operations:
    - CREATE
    - UPDATE
    resources:
    - openstackprovisionservers
    scope: '*'
  sideEffects: None
  timeoutSeconds: 10