apiVersion: admissionregistration.k8s.io/v1
kind: MutatingWebhookConfiguration
metadata:
  name: workflow-mutating-webhook-configuration
  annotations:
    cert-manager.io/inject-ca-from: cluster-service/webhook-server-cert
webhooks:
- admissionReviewVersions:
  - v1
  clientConfig:
    service:
      name: webhook-server
      namespace: cluster-service
      path: /mutate-cloud-pingcap-com-v1-workflow
  failurePolicy: Fail
  name: mworkflow.kb.io
  rules:
    - apiGroups:
        - cloud.pingcap.com
      apiVersions:
        - v1
      operations:
        - CREATE
      resources:
        - workflows
  sideEffects: None
---
apiVersion: admissionregistration.k8s.io/v1
kind: ValidatingWebhookConfiguration
metadata:
  name: workflow-validating-webhook-configuration
  annotations:
    cert-manager.io/inject-ca-from: cluster-service/webhook-server-cert
webhooks:
- admissionReviewVersions:
    - v1
  clientConfig:
    service:
      name: webhook-server
      namespace: cluster-service
      path: /validate-cloud-pingcap-com-v1-workflow
  failurePolicy: Fail
  name: vworkflow.kb.io
  rules:
    - apiGroups:
        - cloud.pingcap.com
      apiVersions:
        - v1
      operations:
        - CREATE
        - UPDATE
      resources:
        - workflows
  sideEffects: None