--- apiVersion: admissionregistration.k8s.io/v1 kind: ValidatingWebhookConfiguration metadata: annotations: include.release.openshift.io/self-managed-high-availability: "true" include.release.openshift.io/single-node-developer: "true" service.beta.openshift.io/inject-cabundle: "true" creationTimestamp: "2026-03-20T08:58:48Z" generation: 2 managedFields: - apiVersion: admissionregistration.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: .: {} f:include.release.openshift.io/self-managed-high-availability: {} f:include.release.openshift.io/single-node-developer: {} f:service.beta.openshift.io/inject-cabundle: {} f:webhooks: .: {} k:{"name":"baremetalhost.metal3.io"}: .: {} f:admissionReviewVersions: {} f:clientConfig: .: {} f:service: .: {} f:name: {} f:namespace: {} f:path: {} f:port: {} f:failurePolicy: {} f:matchPolicy: {} f:name: {} f:namespaceSelector: {} f:objectSelector: {} f:rules: {} f:sideEffects: {} f:timeoutSeconds: {} k:{"name":"bmceventsubscription.metal3.io"}: .: {} f:admissionReviewVersions: {} f:clientConfig: .: {} f:service: .: {} f:name: {} f:namespace: {} f:path: {} f:port: {} f:failurePolicy: {} f:matchPolicy: {} f:name: {} f:namespaceSelector: {} f:objectSelector: {} f:rules: {} f:sideEffects: {} f:timeoutSeconds: {} manager: cluster-baremetal-operator operation: Update time: "2026-03-20T08:58:48Z" - apiVersion: admissionregistration.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:webhooks: k:{"name":"baremetalhost.metal3.io"}: f:clientConfig: f:caBundle: {} k:{"name":"bmceventsubscription.metal3.io"}: f:clientConfig: f:caBundle: {} manager: service-ca-operator operation: Update time: "2026-03-20T08:58:48Z" name: baremetal-operator-validating-webhook-configuration resourceVersion: "17287" uid: 4c9b8dc7-83ff-45b0-910d-e6e7cd078f9d webhooks: - admissionReviewVersions: - v1 - v1beta1 clientConfig: caBundle: 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 service: name: baremetal-operator-webhook-service namespace: openshift-machine-api path: /validate-metal3-io-v1alpha1-baremetalhost port: 443 failurePolicy: Fail matchPolicy: Equivalent name: baremetalhost.metal3.io namespaceSelector: {} objectSelector: {} rules: - apiGroups: - metal3.io apiVersions: - v1alpha1 operations: - CREATE - UPDATE resources: - baremetalhosts scope: '*' sideEffects: None timeoutSeconds: 10 - admissionReviewVersions: - v1 - v1beta1 clientConfig: caBundle: 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 service: name: baremetal-operator-webhook-service namespace: openshift-machine-api path: /validate-metal3-io-v1alpha1-bmceventsubscription port: 443 failurePolicy: Fail matchPolicy: Equivalent name: bmceventsubscription.metal3.io namespaceSelector: {} objectSelector: {} rules: - apiGroups: - metal3.io apiVersions: - v1alpha1 operations: - CREATE - UPDATE resources: - bmceventsubscriptions scope: '*' sideEffects: None timeoutSeconds: 10