--- apiVersion: admissionregistration.k8s.io/v1 kind: MutatingWebhookConfiguration metadata: annotations: cert-manager.io/inject-ca-from: openshift-jobset-operator/jobset-serving-cert creationTimestamp: "2026-10-31T00:33:54Z" generation: 2 labels: app.kubernetes.io/component: webhook app.kubernetes.io/created-by: jobset app.kubernetes.io/instance: jobset app.kubernetes.io/managed-by: kustomize app.kubernetes.io/name: jobset app.kubernetes.io/part-of: jobset managedFields: - apiVersion: admissionregistration.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:webhooks: k:{"name":"mjobset.kb.io"}: f:clientConfig: f:caBundle: {} k:{"name":"mpod.kb.io"}: f:clientConfig: f:caBundle: {} manager: cert-manager-cainjector operation: Update time: "2026-10-31T00:33:54Z" - apiVersion: admissionregistration.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: .: {} f:cert-manager.io/inject-ca-from: {} f:labels: .: {} f:app.kubernetes.io/component: {} f:app.kubernetes.io/created-by: {} f:app.kubernetes.io/instance: {} f:app.kubernetes.io/managed-by: {} f:app.kubernetes.io/name: {} f:app.kubernetes.io/part-of: {} f:ownerReferences: .: {} k:{"uid":"5baf521b-e984-4927-bb49-9983489502f3"}: {} f:webhooks: .: {} k:{"name":"mjobset.kb.io"}: .: {} f:admissionReviewVersions: {} f:clientConfig: .: {} f:service: .: {} f:name: {} f:namespace: {} f:path: {} f:port: {} f:failurePolicy: {} f:matchPolicy: {} f:name: {} f:namespaceSelector: {} f:objectSelector: {} f:reinvocationPolicy: {} f:rules: {} f:sideEffects: {} f:timeoutSeconds: {} k:{"name":"mpod.kb.io"}: .: {} f:admissionReviewVersions: {} f:clientConfig: .: {} f:service: .: {} f:name: {} f:namespace: {} f:path: {} f:port: {} f:failurePolicy: {} f:matchPolicy: {} f:name: {} f:namespaceSelector: {} f:objectSelector: {} f:reinvocationPolicy: {} f:rules: {} f:sideEffects: {} f:timeoutSeconds: {} manager: jobset-operator operation: Update time: "2026-10-31T00:33:54Z" name: jobset-mutating-webhook-configuration ownerReferences: - apiVersion: operator.openshift.io/v1 kind: JobSetOperator name: cluster uid: 5baf521b-e984-4927-bb49-9983489502f3 resourceVersion: "15675" uid: f3a8d428-fc6e-405a-baa2-fc8dde8d8aa3 webhooks: - admissionReviewVersions: - v1 clientConfig: caBundle: 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 service: name: jobset-webhook-service namespace: openshift-jobset-operator path: /mutate-jobset-x-k8s-io-v1alpha2-jobset port: 443 failurePolicy: Fail matchPolicy: Equivalent name: mjobset.kb.io namespaceSelector: {} objectSelector: {} reinvocationPolicy: Never rules: - apiGroups: - jobset.x-k8s.io apiVersions: - v1alpha2 operations: - CREATE resources: - jobsets scope: '*' sideEffects: None timeoutSeconds: 10 - admissionReviewVersions: - v1 clientConfig: caBundle: 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 service: name: jobset-webhook-service namespace: openshift-jobset-operator path: /mutate--v1-pod port: 443 failurePolicy: Fail matchPolicy: Equivalent name: mpod.kb.io namespaceSelector: {} objectSelector: matchExpressions: - key: jobset.sigs.k8s.io/jobset-name operator: Exists reinvocationPolicy: Never rules: - apiGroups: - "" apiVersions: - v1 operations: - CREATE resources: - pods scope: '*' sideEffects: None timeoutSeconds: 10