apiVersion: admissionregistration.k8s.io/v1 kind: MutatingWebhookConfiguration metadata: annotations: creationTimestamp: "2025-12-05T10:59:52Z" generation: 2 labels: app: kubernetes-nmstate name: nmstate ownerReferences: - apiVersion: nmstate.io/v1 blockOwnerDeletion: true controller: true kind: NMState name: nmstate uid: 9783dc6b-2fdd-46fb-917e-093f9ea7ac4d resourceVersion: "21424" uid: a3fb1e30-d580-4f3f-bf41-7e9ed928543e webhooks: - admissionReviewVersions: - v1 - v1beta1 clientConfig: service: name: nmstate-webhook namespace: openshift-nmstate path: /nodenetworkconfigurationpolicies-mutate port: 443 failurePolicy: Fail matchPolicy: Equivalent name: nodenetworkconfigurationpolicies-mutate.nmstate.io namespaceSelector: {} objectSelector: {} reinvocationPolicy: Never rules: - apiGroups: - '*' apiVersions: - v1alpha1 - v1beta1 - v1 operations: - CREATE - UPDATE resources: - nodenetworkconfigurationpolicies scope: '*' sideEffects: None timeoutSeconds: 10 - admissionReviewVersions: - v1 - v1beta1 clientConfig: service: name: nmstate-webhook namespace: openshift-nmstate path: /nodenetworkconfigurationpolicies-status-mutate port: 443 failurePolicy: Fail matchPolicy: Equivalent name: nodenetworkconfigurationpolicies-status-mutate.nmstate.io namespaceSelector: {} objectSelector: {} reinvocationPolicy: Never rules: - apiGroups: - '*' apiVersions: - v1alpha1 - v1beta1 - v1 operations: - CREATE - UPDATE resources: - nodenetworkconfigurationpolicies/status scope: '*' sideEffects: None timeoutSeconds: 10 - admissionReviewVersions: - v1 - v1beta1 clientConfig: service: name: nmstate-webhook namespace: openshift-nmstate path: /nodenetworkconfigurationpolicies-timestamp-mutate port: 443 failurePolicy: Fail matchPolicy: Equivalent name: nodenetworkconfigurationpolicies-timestamp-mutate.nmstate.io namespaceSelector: {} objectSelector: {} reinvocationPolicy: Never rules: - apiGroups: - '*' apiVersions: - v1alpha1 - v1beta1 - v1 operations: - CREATE - UPDATE resources: - nodenetworkconfigurationpolicies - nodenetworkconfigurationpolicies/status scope: '*' sideEffects: None timeoutSeconds: 10 - admissionReviewVersions: - v1 - v1beta1 clientConfig: service: name: nmstate-webhook namespace: openshift-nmstate path: /nodenetworkconfigurationpolicies-update-validate port: 443 failurePolicy: Fail matchPolicy: Equivalent name: nodenetworkconfigurationpolicies-update-validate.nmstate.io namespaceSelector: {} objectSelector: {} reinvocationPolicy: Never rules: - apiGroups: - '*' apiVersions: - v1alpha1 - v1beta1 - v1 operations: - UPDATE resources: - nodenetworkconfigurationpolicies scope: '*' sideEffects: None timeoutSeconds: 10 - admissionReviewVersions: - v1 - v1beta1 clientConfig: service: name: nmstate-webhook namespace: openshift-nmstate path: /nodenetworkconfigurationpolicies-create-validate port: 443 failurePolicy: Fail matchPolicy: Equivalent name: nodenetworkconfigurationpolicies-create-validate.nmstate.io namespaceSelector: {} objectSelector: {} reinvocationPolicy: Never rules: - apiGroups: - '*' apiVersions: - v1alpha1 - v1beta1 - v1 operations: - CREATE resources: - nodenetworkconfigurationpolicies scope: '*' sideEffects: None timeoutSeconds: 10