--- apiVersion: admissionregistration.k8s.io/v1 kind: ValidatingWebhookConfiguration metadata: annotations: include.release.openshift.io/self-managed-high-availability: "true" include.release.openshift.io/single-node-developer: "true" service.beta.openshift.io/inject-cabundle: "true" creationTimestamp: "2026-03-19T12:27:33Z" generation: 2 managedFields: - apiVersion: admissionregistration.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: .: {} f:include.release.openshift.io/self-managed-high-availability: {} f:include.release.openshift.io/single-node-developer: {} f:service.beta.openshift.io/inject-cabundle: {} f:webhooks: .: {} k:{"name":"baremetalhost.metal3.io"}: .: {} f:admissionReviewVersions: {} f:clientConfig: .: {} f:service: .: {} f:name: {} f:namespace: {} f:path: {} f:port: {} f:failurePolicy: {} f:matchPolicy: {} f:name: {} f:namespaceSelector: {} f:objectSelector: {} f:rules: {} f:sideEffects: {} f:timeoutSeconds: {} k:{"name":"bmceventsubscription.metal3.io"}: .: {} f:admissionReviewVersions: {} f:clientConfig: .: {} f:service: .: {} f:name: {} f:namespace: {} f:path: {} f:port: {} f:failurePolicy: {} f:matchPolicy: {} f:name: {} f:namespaceSelector: {} f:objectSelector: {} f:rules: {} f:sideEffects: {} f:timeoutSeconds: {} manager: cluster-baremetal-operator operation: Update time: "2026-03-19T12:27:33Z" - apiVersion: admissionregistration.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:webhooks: k:{"name":"baremetalhost.metal3.io"}: f:clientConfig: f:caBundle: {} k:{"name":"bmceventsubscription.metal3.io"}: f:clientConfig: f:caBundle: {} manager: service-ca-operator operation: Update time: "2026-03-19T12:27:33Z" name: baremetal-operator-validating-webhook-configuration resourceVersion: "19601" uid: 18a0d07e-862d-4ff9-8cc0-094cbc5818ee webhooks: - admissionReviewVersions: - v1 - v1beta1 clientConfig: caBundle: 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 service: name: baremetal-operator-webhook-service namespace: openshift-machine-api path: /validate-metal3-io-v1alpha1-baremetalhost port: 443 failurePolicy: Fail matchPolicy: Equivalent name: baremetalhost.metal3.io namespaceSelector: {} objectSelector: {} rules: - apiGroups: - metal3.io apiVersions: - v1alpha1 operations: - CREATE - UPDATE resources: - baremetalhosts scope: '*' sideEffects: None timeoutSeconds: 10 - admissionReviewVersions: - v1 - v1beta1 clientConfig: caBundle: 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 service: name: baremetal-operator-webhook-service namespace: openshift-machine-api path: /validate-metal3-io-v1alpha1-bmceventsubscription port: 443 failurePolicy: Fail matchPolicy: Equivalent name: bmceventsubscription.metal3.io namespaceSelector: {} objectSelector: {} rules: - apiGroups: - metal3.io apiVersions: - v1alpha1 operations: - CREATE - UPDATE resources: - bmceventsubscriptions scope: '*' sideEffects: None timeoutSeconds: 10