apiVersion: admissionregistration.k8s.io/v1
kind: ValidatingWebhookConfiguration
metadata:
  annotations:
    cert-manager.io/inject-ca-from-secret: cert-manager/cert-manager-webhook-ca
  creationTimestamp: "2025-12-05T12:58:20Z"
  generation: 2
  labels:
    app: webhook
    app.kubernetes.io/component: webhook
    app.kubernetes.io/instance: cert-manager
    app.kubernetes.io/name: webhook
    app.kubernetes.io/version: v1.18.3
  name: cert-manager-webhook
  resourceVersion: "21179"
  uid: 41ef21e0-31b2-4de6-816e-acdce1c0517a
webhooks:
- admissionReviewVersions:
  - v1
  clientConfig:
    caBundle: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUJ3VENDQVVpZ0F3SUJBZ0lSQU1sY0F0NWRrZW9lRnZoNCtiQVFuRTR3Q2dZSUtvWkl6ajBFQXdNd0lqRWcKTUI0R0ExVUVBeE1YWTJWeWRDMXRZVzVoWjJWeUxYZGxZbWh2YjJzdFkyRXdIaGNOTWpVeE1qQTFNVEkxT1RBeApXaGNOTWpZeE1qQTFNVEkxT1RBeFdqQWlNU0F3SGdZRFZRUURFeGRqWlhKMExXMWhibUZuWlhJdGQyVmlhRzl2CmF5MWpZVEIyTUJBR0J5cUdTTTQ5QWdFR0JTdUJCQUFpQTJJQUJMU0gxZk9mSVhmVnBvUGF6Ry9DTlJHMXRDZlkKMGVwR2dlcW44aUE2cEhWS2hHakpGTjBHZE9aaG4vNE9zM280WmJUdHFzd28zTXZEaDY4MVVwalBXWXV5eEJMYgpUV3c1OEFGR1JUMkxZalluM08wRzNPRkNTclBnOW1yNGlyVEt0S05DTUVBd0RnWURWUjBQQVFIL0JBUURBZ0trCk1BOEdBMVVkRXdFQi93UUZNQU1CQWY4d0hRWURWUjBPQkJZRUZQNzJXeklvMzZuUVlYa2hOSTZFU1Ryd1FVS0YKTUFvR0NDcUdTTTQ5QkFNREEyY0FNR1FDTUNEZ0FZN2pITEdzWW04T1hIeldHN1VWY0JiV3dHdmN2VDZUdGFJbQp6eGFYazBUT2EwMmk5QkxFVUs2dU0zN3Z2QUl3RCtTeS9sSVZOOFBEM0hZWm51eUg1QzFVdTVVc2ltb3gva0pMCmJSaktKbndmMVBhdi9WZEtwZ1VaaUU5M3dXUlYKLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo=
    service:
      name: cert-manager-webhook
      namespace: cert-manager
      path: /validate
      port: 443
  failurePolicy: Fail
  matchPolicy: Equivalent
  name: webhook.cert-manager.io
  namespaceSelector:
    matchExpressions:
    - key: cert-manager.io/disable-validation
      operator: NotIn
      values:
      - "true"
  objectSelector: {}
  rules:
  - apiGroups:
    - cert-manager.io
    - acme.cert-manager.io
    apiVersions:
    - v1
    operations:
    - CREATE
    - UPDATE
    resources:
    - '*/*'
    scope: '*'
  sideEffects: None
  timeoutSeconds: 30