apiVersion: admissionregistration.k8s.io/v1 kind: ValidatingWebhookConfiguration metadata: annotations: cert-manager.io/inject-ca-from: openstack-operators/openstack-baremetal-operator-serving-cert creationTimestamp: "2025-10-11T10:51:57Z" generation: 2 labels: app.kubernetes.io/component: webhook app.kubernetes.io/created-by: openstack-operator app.kubernetes.io/instance: validating-webhook-configuration app.kubernetes.io/managed-by: kustomize app.kubernetes.io/name: validatingwebhookconfiguration app.kubernetes.io/part-of: openstack-baremetal-operator openstack.openstack.org/managed: "true" name: openstack-baremetal-operator-validating-webhook-configuration resourceVersion: "32991" uid: 51249588-e3d9-407f-beec-79bdc7e6f0a9 webhooks: - admissionReviewVersions: - v1 clientConfig: caBundle: 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 service: name: openstack-baremetal-operator-webhook-service namespace: openstack-operators path: /validate-baremetal-openstack-org-v1beta1-openstackbaremetalset port: 443 failurePolicy: Fail matchPolicy: Equivalent name: vopenstackbaremetalset.kb.io namespaceSelector: {} objectSelector: {} rules: - apiGroups: - baremetal.openstack.org apiVersions: - v1beta1 operations: - CREATE - UPDATE - DELETE resources: - openstackbaremetalsets scope: '*' sideEffects: None timeoutSeconds: 10 - admissionReviewVersions: - v1 clientConfig: caBundle: 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 service: name: openstack-baremetal-operator-webhook-service namespace: openstack-operators path: /validate-baremetal-openstack-org-v1beta1-openstackprovisionserver port: 443 failurePolicy: Fail matchPolicy: Equivalent name: vopenstackprovisionserver.kb.io namespaceSelector: {} objectSelector: {} rules: - apiGroups: - baremetal.openstack.org apiVersions: - v1beta1 operations: - CREATE - UPDATE resources: - openstackprovisionservers scope: '*' sideEffects: None timeoutSeconds: 10