apiVersion: admissionregistration.k8s.io/v1 kind: MutatingWebhookConfiguration metadata: annotations: creationTimestamp: "2025-10-11T10:48:56Z" generation: 2 labels: app: kubernetes-nmstate name: nmstate ownerReferences: - apiVersion: nmstate.io/v1 blockOwnerDeletion: true controller: true kind: NMState name: nmstate uid: b80701c7-1e85-4c03-8c7e-b4e072ac9f5f resourceVersion: "29497" uid: a989d9a3-d8af-4d98-bc78-0498c4173ce1 webhooks: - admissionReviewVersions: - v1 - v1beta1 clientConfig: service: name: nmstate-webhook namespace: openshift-nmstate path: /nodenetworkconfigurationpolicies-mutate port: 443 failurePolicy: Fail matchPolicy: Equivalent name: nodenetworkconfigurationpolicies-mutate.nmstate.io namespaceSelector: {} objectSelector: {} reinvocationPolicy: Never rules: - apiGroups: - '*' apiVersions: - v1alpha1 - v1beta1 - v1 operations: - CREATE - UPDATE resources: - nodenetworkconfigurationpolicies scope: '*' sideEffects: None timeoutSeconds: 10 - admissionReviewVersions: - v1 - v1beta1 clientConfig: service: name: nmstate-webhook namespace: openshift-nmstate path: /nodenetworkconfigurationpolicies-status-mutate port: 443 failurePolicy: Fail matchPolicy: Equivalent name: nodenetworkconfigurationpolicies-status-mutate.nmstate.io namespaceSelector: {} objectSelector: {} reinvocationPolicy: Never rules: - apiGroups: - '*' apiVersions: - v1alpha1 - v1beta1 - v1 operations: - CREATE - UPDATE resources: - nodenetworkconfigurationpolicies/status scope: '*' sideEffects: None timeoutSeconds: 10 - admissionReviewVersions: - v1 - v1beta1 clientConfig: service: name: nmstate-webhook namespace: openshift-nmstate path: /nodenetworkconfigurationpolicies-timestamp-mutate port: 443 failurePolicy: Fail matchPolicy: Equivalent name: nodenetworkconfigurationpolicies-timestamp-mutate.nmstate.io namespaceSelector: {} objectSelector: {} reinvocationPolicy: Never rules: - apiGroups: - '*' apiVersions: - v1alpha1 - v1beta1 - v1 operations: - CREATE - UPDATE resources: - nodenetworkconfigurationpolicies - nodenetworkconfigurationpolicies/status scope: '*' sideEffects: None timeoutSeconds: 10 - admissionReviewVersions: - v1 - v1beta1 clientConfig: service: name: nmstate-webhook namespace: openshift-nmstate path: /nodenetworkconfigurationpolicies-update-validate port: 443 failurePolicy: Fail matchPolicy: Equivalent name: nodenetworkconfigurationpolicies-update-validate.nmstate.io namespaceSelector: {} objectSelector: {} reinvocationPolicy: Never rules: - apiGroups: - '*' apiVersions: - v1alpha1 - v1beta1 - v1 operations: - UPDATE resources: - nodenetworkconfigurationpolicies scope: '*' sideEffects: None timeoutSeconds: 10 - admissionReviewVersions: - v1 - v1beta1 clientConfig: service: name: nmstate-webhook namespace: openshift-nmstate path: /nodenetworkconfigurationpolicies-create-validate port: 443 failurePolicy: Fail matchPolicy: Equivalent name: nodenetworkconfigurationpolicies-create-validate.nmstate.io namespaceSelector: {} objectSelector: {} reinvocationPolicy: Never rules: - apiGroups: - '*' apiVersions: - v1alpha1 - v1beta1 - v1 operations: - CREATE resources: - nodenetworkconfigurationpolicies scope: '*' sideEffects: None timeoutSeconds: 10