apiVersion: admissionregistration.k8s.io/v1
kind: ValidatingWebhookConfiguration
metadata:
  annotations:
    cert-manager.io/inject-ca-from: openstack-operators/openstack-baremetal-operator-serving-cert
  creationTimestamp: "2026-04-06T12:15:16Z"
  generation: 2
  labels:
    app.kubernetes.io/component: webhook
    app.kubernetes.io/created-by: openstack-operator
    app.kubernetes.io/instance: validating-webhook-configuration
    app.kubernetes.io/managed-by: kustomize
    app.kubernetes.io/name: validatingwebhookconfiguration
    app.kubernetes.io/part-of: openstack-baremetal-operator
    openstack.openstack.org/managed: "true"
  name: openstack-baremetal-operator-validating-webhook-configuration
  resourceVersion: "40215"
  uid: 617f1d33-1699-4f2f-8968-0cc6bf883041
webhooks:
- admissionReviewVersions:
  - v1
  clientConfig:
    caBundle: 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
    service:
      name: openstack-baremetal-operator-webhook-service
      namespace: openstack-operators
      path: /validate-baremetal-openstack-org-v1beta1-openstackbaremetalset
      port: 443
  failurePolicy: Fail
  matchPolicy: Equivalent
  name: vopenstackbaremetalset-v1beta1.kb.io
  namespaceSelector: {}
  objectSelector: {}
  rules:
  - apiGroups:
    - baremetal.openstack.org
    apiVersions:
    - v1beta1
    operations:
    - CREATE
    - UPDATE
    resources:
    - openstackbaremetalsets
    scope: '*'
  sideEffects: None
  timeoutSeconds: 10
- admissionReviewVersions:
  - v1
  clientConfig:
    caBundle: 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
    service:
      name: openstack-baremetal-operator-webhook-service
      namespace: openstack-operators
      path: /validate-baremetal-openstack-org-v1beta1-openstackprovisionserver
      port: 443
  failurePolicy: Fail
  matchPolicy: Equivalent
  name: vopenstackprovisionserver-v1beta1.kb.io
  namespaceSelector: {}
  objectSelector: {}
  rules:
  - apiGroups:
    - baremetal.openstack.org
    apiVersions:
    - v1beta1
    operations:
    - CREATE
    - UPDATE
    resources:
    - openstackprovisionservers
    scope: '*'
  sideEffects: None
  timeoutSeconds: 10