--- apiVersion: admissionregistration.k8s.io/v1 kind: MutatingWebhookConfiguration metadata: annotations: cert-manager.io/inject-ca-from: openstack-operators/openstack-baremetal-operator-serving-cert creationTimestamp: "2026-03-08T04:13:42Z" generation: 2 labels: app.kubernetes.io/component: webhook app.kubernetes.io/created-by: openstack-operator app.kubernetes.io/instance: mutating-webhook-configuration app.kubernetes.io/managed-by: kustomize app.kubernetes.io/name: mutatingwebhookconfiguration app.kubernetes.io/part-of: openstack-baremetal-operator openstack.openstack.org/managed: "true" managedFields: - apiVersion: admissionregistration.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:webhooks: k:{"name":"mopenstackbaremetalset-v1beta1.kb.io"}: f:clientConfig: f:caBundle: {} k:{"name":"mopenstackprovisionserver-v1beta1.kb.io"}: f:clientConfig: f:caBundle: {} manager: cert-manager-cainjector operation: Update time: "2026-03-08T04:13:57Z" - apiVersion: admissionregistration.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: .: {} f:cert-manager.io/inject-ca-from: {} f:labels: .: {} f:app.kubernetes.io/component: {} f:app.kubernetes.io/created-by: {} f:app.kubernetes.io/instance: {} f:app.kubernetes.io/managed-by: {} f:app.kubernetes.io/name: {} f:app.kubernetes.io/part-of: {} f:openstack.openstack.org/managed: {} f:webhooks: .: {} k:{"name":"mopenstackbaremetalset-v1beta1.kb.io"}: .: {} f:admissionReviewVersions: {} f:clientConfig: .: {} f:service: .: {} f:name: {} f:namespace: {} f:path: {} f:port: {} f:failurePolicy: {} f:matchPolicy: {} f:name: {} f:namespaceSelector: {} f:objectSelector: {} f:reinvocationPolicy: {} f:rules: {} f:sideEffects: {} f:timeoutSeconds: {} k:{"name":"mopenstackprovisionserver-v1beta1.kb.io"}: .: {} f:admissionReviewVersions: {} f:clientConfig: .: {} f:service: .: {} f:name: {} f:namespace: {} f:path: {} f:port: {} f:failurePolicy: {} f:matchPolicy: {} f:name: {} f:namespaceSelector: {} f:objectSelector: {} f:reinvocationPolicy: {} f:rules: {} f:sideEffects: {} f:timeoutSeconds: {} manager: operator operation: Update time: "2026-03-08T04:13:59Z" name: openstack-baremetal-operator-mutating-webhook-configuration resourceVersion: "24979" uid: 54a0dcba-583d-4455-ba16-5d2367795af0 webhooks: - admissionReviewVersions: - v1 clientConfig: caBundle: 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 service: name: openstack-baremetal-operator-webhook-service namespace: openstack-operators path: /mutate-baremetal-openstack-org-v1beta1-openstackbaremetalset port: 443 failurePolicy: Fail matchPolicy: Equivalent name: mopenstackbaremetalset-v1beta1.kb.io namespaceSelector: {} objectSelector: {} reinvocationPolicy: Never rules: - apiGroups: - baremetal.openstack.org apiVersions: - v1beta1 operations: - CREATE - UPDATE resources: - openstackbaremetalsets scope: '*' sideEffects: None timeoutSeconds: 10 - admissionReviewVersions: - v1 clientConfig: caBundle: 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 service: name: openstack-baremetal-operator-webhook-service namespace: openstack-operators path: /mutate-baremetal-openstack-org-v1beta1-openstackprovisionserver port: 443 failurePolicy: Fail matchPolicy: Equivalent name: mopenstackprovisionserver-v1beta1.kb.io namespaceSelector: {} objectSelector: {} reinvocationPolicy: Never rules: - apiGroups: - baremetal.openstack.org apiVersions: - v1beta1 operations: - CREATE - UPDATE resources: - openstackprovisionservers scope: '*' sideEffects: None timeoutSeconds: 10