apiVersion: admissionregistration.k8s.io/v1 kind: MutatingWebhookConfiguration metadata: annotations: creationTimestamp: "2025-12-05T12:59:59Z" generation: 2 labels: app: kubernetes-nmstate name: nmstate ownerReferences: - apiVersion: nmstate.io/v1 blockOwnerDeletion: true controller: true kind: NMState name: nmstate uid: 8ea356e9-e8a0-4f77-b803-933037ef7639 resourceVersion: "22733" uid: b20e0848-114d-43a2-9140-2df292b741c6 webhooks: - admissionReviewVersions: - v1 - v1beta1 clientConfig: service: name: nmstate-webhook namespace: openshift-nmstate path: /nodenetworkconfigurationpolicies-mutate port: 443 failurePolicy: Fail matchPolicy: Equivalent name: nodenetworkconfigurationpolicies-mutate.nmstate.io namespaceSelector: {} objectSelector: {} reinvocationPolicy: Never rules: - apiGroups: - '*' apiVersions: - v1alpha1 - v1beta1 - v1 operations: - CREATE - UPDATE resources: - nodenetworkconfigurationpolicies scope: '*' sideEffects: None timeoutSeconds: 10 - admissionReviewVersions: - v1 - v1beta1 clientConfig: service: name: nmstate-webhook namespace: openshift-nmstate path: /nodenetworkconfigurationpolicies-status-mutate port: 443 failurePolicy: Fail matchPolicy: Equivalent name: nodenetworkconfigurationpolicies-status-mutate.nmstate.io namespaceSelector: {} objectSelector: {} reinvocationPolicy: Never rules: - apiGroups: - '*' apiVersions: - v1alpha1 - v1beta1 - v1 operations: - CREATE - UPDATE resources: - nodenetworkconfigurationpolicies/status scope: '*' sideEffects: None timeoutSeconds: 10 - admissionReviewVersions: - v1 - v1beta1 clientConfig: service: name: nmstate-webhook namespace: openshift-nmstate path: /nodenetworkconfigurationpolicies-timestamp-mutate port: 443 failurePolicy: Fail matchPolicy: Equivalent name: nodenetworkconfigurationpolicies-timestamp-mutate.nmstate.io namespaceSelector: {} objectSelector: {} reinvocationPolicy: Never rules: - apiGroups: - '*' apiVersions: - v1alpha1 - v1beta1 - v1 operations: - CREATE - UPDATE resources: - nodenetworkconfigurationpolicies - nodenetworkconfigurationpolicies/status scope: '*' sideEffects: None timeoutSeconds: 10 - admissionReviewVersions: - v1 - v1beta1 clientConfig: service: name: nmstate-webhook namespace: openshift-nmstate path: /nodenetworkconfigurationpolicies-update-validate port: 443 failurePolicy: Fail matchPolicy: Equivalent name: nodenetworkconfigurationpolicies-update-validate.nmstate.io namespaceSelector: {} objectSelector: {} reinvocationPolicy: Never rules: - apiGroups: - '*' apiVersions: - v1alpha1 - v1beta1 - v1 operations: - UPDATE resources: - nodenetworkconfigurationpolicies scope: '*' sideEffects: None timeoutSeconds: 10 - admissionReviewVersions: - v1 - v1beta1 clientConfig: service: name: nmstate-webhook namespace: openshift-nmstate path: /nodenetworkconfigurationpolicies-create-validate port: 443 failurePolicy: Fail matchPolicy: Equivalent name: nodenetworkconfigurationpolicies-create-validate.nmstate.io namespaceSelector: {} objectSelector: {} reinvocationPolicy: Never rules: - apiGroups: - '*' apiVersions: - v1alpha1 - v1beta1 - v1 operations: - CREATE resources: - nodenetworkconfigurationpolicies scope: '*' sideEffects: None timeoutSeconds: 10