apiVersion: admissionregistration.k8s.io/v1 kind: MutatingWebhookConfiguration metadata: name: mutating-config labels: app: mutating-config webhooks: - name: propagationpolicy.karmada.io rules: - operations: ["CREATE", "UPDATE"] apiGroups: ["policy.karmada.io"] apiVersions: ["*"] resources: ["propagationpolicies"] scope: "Namespaced" clientConfig: url: https://karmada-webhook.karmada-system.svc:443/mutate-propagationpolicy caBundle: {{caBundle}} failurePolicy: Fail sideEffects: None admissionReviewVersions: ["v1"] timeoutSeconds: 3 - name: clusterpropagationpolicy.karmada.io rules: - operations: ["CREATE", "UPDATE"] apiGroups: ["policy.karmada.io"] apiVersions: ["*"] resources: ["clusterpropagationpolicies"] scope: "Cluster" clientConfig: url: https://karmada-webhook.karmada-system.svc:443/mutate-clusterpropagationpolicy caBundle: {{caBundle}} failurePolicy: Fail sideEffects: None admissionReviewVersions: ["v1"] timeoutSeconds: 3 - name: overridepolicy.karmada.io rules: - operations: ["CREATE", "UPDATE"] apiGroups: ["policy.karmada.io"] apiVersions: ["*"] resources: ["overridepolicies"] scope: "Namespaced" clientConfig: url: https://karmada-webhook.karmada-system.svc:443/mutate-overridepolicy caBundle: {{caBundle}} failurePolicy: Fail sideEffects: None admissionReviewVersions: ["v1"] timeoutSeconds: 3 - name: work.karmada.io rules: - operations: ["CREATE", "UPDATE"] apiGroups: ["work.karmada.io"] apiVersions: ["*"] resources: ["works"] scope: "Namespaced" clientConfig: url: https://karmada-webhook.karmada-system.svc:443/mutate-work caBundle: {{caBundle}} failurePolicy: Fail sideEffects: None admissionReviewVersions: ["v1"] timeoutSeconds: 3 --- apiVersion: admissionregistration.k8s.io/v1 kind: ValidatingWebhookConfiguration metadata: name: validating-config labels: app: validating-config webhooks: - name: cluster.karmada.io rules: - operations: ["CREATE", "UPDATE"] apiGroups: ["cluster.karmada.io"] apiVersions: ["*"] resources: ["clusters"] scope: "Cluster" clientConfig: url: https://karmada-webhook.karmada-system.svc:443/validate-cluster caBundle: {{caBundle}} failurePolicy: Fail sideEffects: None admissionReviewVersions: ["v1"] timeoutSeconds: 3 - name: propagationpolicy.karmada.io rules: - operations: ["CREATE", "UPDATE"] apiGroups: ["policy.karmada.io"] apiVersions: ["*"] resources: ["propagationpolicies"] scope: "Namespaced" clientConfig: url: https://karmada-webhook.karmada-system.svc:443/validate-propagationpolicy caBundle: {{caBundle}} failurePolicy: Fail sideEffects: None admissionReviewVersions: ["v1"] timeoutSeconds: 3 - name: clusterpropagationpolicy.karmada.io rules: - operations: ["CREATE", "UPDATE"] apiGroups: ["policy.karmada.io"] apiVersions: ["*"] resources: ["clusterpropagationpolicies"] scope: "Cluster" clientConfig: url: https://karmada-webhook.karmada-system.svc:443/validate-clusterpropagationpolicy caBundle: {{caBundle}} failurePolicy: Fail sideEffects: None admissionReviewVersions: ["v1"] timeoutSeconds: 3