---
apiVersion: admissionregistration.k8s.io/v1
kind: MutatingWebhookConfiguration
metadata:
  name: mutating-webhook-configuration
webhooks:
- admissionReviewVersions:
  - v1
  clientConfig:
    service:
      name: webhook-service
      namespace: system
      path: /mutate-cloud-pingcap-com-v1-account
  failurePolicy: Fail
  name: maccount.kb.io
  rules:
  - apiGroups:
    - cloud.pingcap.com
    apiVersions:
    - v1
    operations:
    - CREATE
    - UPDATE
    resources:
    - accounts
  sideEffects: None
- admissionReviewVersions:
  - v1
  - v1beta1
  clientConfig:
    service:
      name: webhook-service
      namespace: system
      path: /mutate-cloud-pingcap-com-v1-backup
  failurePolicy: Fail
  name: mbackup.kb.io
  rules:
  - apiGroups:
    - cloud.pingcap.com
    apiVersions:
    - v1
    operations:
    - CREATE
    - UPDATE
    resources:
    - backups
  sideEffects: None
- admissionReviewVersions:
  - v1
  - v1beta1
  clientConfig:
    service:
      name: webhook-service
      namespace: system
      path: /mutate-cloud-pingcap-com-v1-branch
  failurePolicy: Fail
  name: mbranch.kb.io
  rules:
  - apiGroups:
    - cloud.pingcap.com
    apiVersions:
    - v1
    operations:
    - CREATE
    - UPDATE
    resources:
    - branches
  sideEffects: None
- admissionReviewVersions:
  - v1
  - v1beta1
  clientConfig:
    service:
      name: webhook-service
      namespace: system
      path: /mutate-cloud-pingcap-com-v1-cluster
  failurePolicy: Fail
  name: mcluster.kb.io
  rules:
  - apiGroups:
    - cloud.pingcap.com
    apiVersions:
    - v1
    operations:
    - CREATE
    - UPDATE
    resources:
    - clusters
  sideEffects: None
- admissionReviewVersions:
  - v1
  - v1beta1
  clientConfig:
    service:
      name: webhook-service
      namespace: system
      path: /mutate-cloud-pingcap-com-v1-configchange
  failurePolicy: Fail
  name: mconfigchange.kb.io
  rules:
  - apiGroups:
    - cloud.pingcap.com
    apiVersions:
    - v1
    operations:
    - CREATE
    - UPDATE
    resources:
    - configchanges
  sideEffects: None
- admissionReviewVersions:
  - v1
  - v1beta1
  clientConfig:
    service:
      name: webhook-service
      namespace: system
      path: /mutate-cloud-pingcap-com-v1-configrevision
  failurePolicy: Fail
  name: mconfigrevision.kb.io
  rules:
  - apiGroups:
    - cloud.pingcap.com
    apiVersions:
    - v1
    operations:
    - CREATE
    - UPDATE
    resources:
    - configrevisions
  sideEffects: None
- admissionReviewVersions:
  - v1
  - v1beta1
  clientConfig:
    service:
      name: webhook-service
      namespace: system
      path: /mutate-cloud-pingcap-com-v1-dumpling
  failurePolicy: Fail
  name: mdumpling.kb.io
  rules:
  - apiGroups:
    - cloud.pingcap.com
    apiVersions:
    - v1
    operations:
    - CREATE
    - UPDATE
    resources:
    - dumplings
  sideEffects: None
- admissionReviewVersions:
  - v1
  - v1beta1
  clientConfig:
    service:
      name: webhook-service
      namespace: system
      path: /mutate-cloud-pingcap-com-v1-dwworker
  failurePolicy: Fail
  name: mdwworker.kb.io
  rules:
  - apiGroups:
    - cloud.pingcap.com
    apiVersions:
    - v1
    operations:
    - CREATE
    - UPDATE
    resources:
    - dwworkers
  sideEffects: None
- admissionReviewVersions:
  - v1
  - v1beta1
  clientConfig:
    service:
      name: webhook-service
      namespace: system
      path: /mutate-cloud-pingcap-com-v1-export
  failurePolicy: Fail
  name: mexport.kb.io
  rules:
  - apiGroups:
    - cloud.pingcap.com
    apiVersions:
    - v1
    operations:
    - CREATE
    - UPDATE
    resources:
    - exports
  sideEffects: None
- admissionReviewVersions:
  - v1
  - v1beta1
  clientConfig:
    service:
      name: webhook-service
      namespace: system
      path: /mutate-cloud-pingcap-com-v1-import
  failurePolicy: Fail
  name: mimport.kb.io
  rules:
  - apiGroups:
    - cloud.pingcap.com
    apiVersions:
    - v1
    operations:
    - CREATE
    - UPDATE
    resources:
    - imports
  sideEffects: None
- admissionReviewVersions:
  - v1
  - v1beta1
  clientConfig:
    service:
      name: webhook-service
      namespace: system
      path: /mutate-cloud-pingcap-com-v1-network
  failurePolicy: Fail
  name: mnetwork.kb.io
  rules:
  - apiGroups:
    - cloud.pingcap.com
    apiVersions:
    - v1
    operations:
    - CREATE
    - UPDATE
    resources:
    - networks
  sideEffects: None
- admissionReviewVersions:
  - v1
  - v1beta1
  clientConfig:
    service:
      name: webhook-service
      namespace: system
      path: /mutate-cloud-pingcap-com-v1-networkpeer
  failurePolicy: Fail
  name: mnetworkpeer.kb.io
  rules:
  - apiGroups:
    - cloud.pingcap.com
    apiVersions:
    - v1
    operations:
    - CREATE
    - UPDATE
    resources:
    - networkpeers
  sideEffects: None
- admissionReviewVersions:
  - v1
  - v1beta1
  clientConfig:
    service:
      name: webhook-service
      namespace: system
      path: /mutate-cloud-pingcap-com-v1-provider
  failurePolicy: Fail
  name: mprovider.kb.io
  rules:
  - apiGroups:
    - cloud.pingcap.com
    apiVersions:
    - v1
    operations:
    - CREATE
    - UPDATE
    resources:
    - providers
  sideEffects: None
- admissionReviewVersions:
  - v1
  - v1beta1
  clientConfig:
    service:
      name: webhook-service
      namespace: system
      path: /mutate-cloud-pingcap-com-v1-providertype
  failurePolicy: Fail
  name: mprovidertype.kb.io
  rules:
  - apiGroups:
    - cloud.pingcap.com
    apiVersions:
    - v1
    operations:
    - CREATE
    - UPDATE
    resources:
    - providertypes
  sideEffects: None
- admissionReviewVersions:
  - v1
  - v1beta1
  clientConfig:
    service:
      name: webhook-service
      namespace: system
      path: /mutate-cloud-pingcap-com-v1-restore
  failurePolicy: Fail
  name: mrestore.kb.io
  rules:
  - apiGroups:
    - cloud.pingcap.com
    apiVersions:
    - v1
    operations:
    - CREATE
    - UPDATE
    resources:
    - restores
  sideEffects: None
- admissionReviewVersions:
  - v1
  - v1beta1
  clientConfig:
    service:
      name: webhook-service
      namespace: system
      path: /mutate-cloud-pingcap-com-v1-ticdc
  failurePolicy: Fail
  name: mticdc.kb.io
  rules:
  - apiGroups:
    - cloud.pingcap.com
    apiVersions:
    - v1
    operations:
    - CREATE
    - UPDATE
    resources:
    - ticdcs
  sideEffects: None
- admissionReviewVersions:
  - v1
  clientConfig:
    service:
      name: webhook-service
      namespace: system
      path: /mutate-cloud-pingcap-com-v1-upgradeoperation
  failurePolicy: Fail
  name: mupgradeoperation.kb.io
  rules:
  - apiGroups:
    - cloud.pingcap.com
    apiVersions:
    - v1
    operations:
    - CREATE
    resources:
    - upgradeoperations
  sideEffects: None
- admissionReviewVersions:
  - v1
  clientConfig:
    service:
      name: webhook-service
      namespace: system
      path: /mutate-cloud-pingcap-com-v1-workflow
  failurePolicy: Fail
  name: mworkflow.kb.io
  rules:
  - apiGroups:
    - cloud.pingcap.com
    apiVersions:
    - v1
    operations:
    - CREATE
    resources:
    - workflows
  sideEffects: None
---
apiVersion: admissionregistration.k8s.io/v1
kind: ValidatingWebhookConfiguration
metadata:
  name: validating-webhook-configuration
webhooks:
- admissionReviewVersions:
  - v1
  clientConfig:
    service:
      name: webhook-service
      namespace: system
      path: /validate-cloud-pingcap-com-v1-account
  failurePolicy: Fail
  name: vaccount.kb.io
  rules:
  - apiGroups:
    - cloud.pingcap.com
    apiVersions:
    - v1
    operations:
    - CREATE
    - UPDATE
    resources:
    - accounts
  sideEffects: None
- admissionReviewVersions:
  - v1
  - v1beta1
  clientConfig:
    service:
      name: webhook-service
      namespace: system
      path: /validate-cloud-pingcap-com-v1-backup
  failurePolicy: Fail
  name: vbackup.kb.io
  rules:
  - apiGroups:
    - cloud.pingcap.com
    apiVersions:
    - v1
    operations:
    - CREATE
    - UPDATE
    resources:
    - backups
  sideEffects: None
- admissionReviewVersions:
  - v1
  - v1beta1
  clientConfig:
    service:
      name: webhook-service
      namespace: system
      path: /validate-cloud-pingcap-com-v1-branch
  failurePolicy: Fail
  name: vbranch.kb.io
  rules:
  - apiGroups:
    - cloud.pingcap.com
    apiVersions:
    - v1
    operations:
    - CREATE
    - UPDATE
    resources:
    - branches
  sideEffects: None
- admissionReviewVersions:
  - v1
  - v1beta1
  clientConfig:
    service:
      name: webhook-service
      namespace: system
      path: /validate-cloud-pingcap-com-v1-cluster
  failurePolicy: Fail
  name: vcluster.kb.io
  rules:
  - apiGroups:
    - cloud.pingcap.com
    apiVersions:
    - v1
    operations:
    - CREATE
    - UPDATE
    resources:
    - clusters
  sideEffects: None
- admissionReviewVersions:
  - v1
  - v1beta1
  clientConfig:
    service:
      name: webhook-service
      namespace: system
      path: /validate-cloud-pingcap-com-v1-configchange
  failurePolicy: Fail
  name: vconfigchange.kb.io
  rules:
  - apiGroups:
    - cloud.pingcap.com
    apiVersions:
    - v1
    operations:
    - CREATE
    - UPDATE
    resources:
    - configchanges
  sideEffects: None
- admissionReviewVersions:
  - v1
  - v1beta1
  clientConfig:
    service:
      name: webhook-service
      namespace: system
      path: /validate-cloud-pingcap-com-v1-configrevision
  failurePolicy: Fail
  name: vconfigrevision.kb.io
  rules:
  - apiGroups:
    - cloud.pingcap.com
    apiVersions:
    - v1
    operations:
    - CREATE
    - UPDATE
    resources:
    - configrevisions
  sideEffects: None
- admissionReviewVersions:
  - v1
  - v1beta1
  clientConfig:
    service:
      name: webhook-service
      namespace: system
      path: /validate-cloud-pingcap-com-v1-dumpling
  failurePolicy: Fail
  name: vdumpling.kb.io
  rules:
  - apiGroups:
    - cloud.pingcap.com
    apiVersions:
    - v1
    operations:
    - CREATE
    - UPDATE
    resources:
    - dumplings
  sideEffects: None
- admissionReviewVersions:
  - v1
  - v1beta1
  clientConfig:
    service:
      name: webhook-service
      namespace: system
      path: /validate-cloud-pingcap-com-v1-dwworker
  failurePolicy: Fail
  name: vdwworker.kb.io
  rules:
  - apiGroups:
    - cloud.pingcap.com
    apiVersions:
    - v1
    operations:
    - CREATE
    - UPDATE
    resources:
    - dwworkers
  sideEffects: None
- admissionReviewVersions:
  - v1
  - v1beta1
  clientConfig:
    service:
      name: webhook-service
      namespace: system
      path: /validate-cloud-pingcap-com-v1-export
  failurePolicy: Fail
  name: vexport.kb.io
  rules:
  - apiGroups:
    - cloud.pingcap.com
    apiVersions:
    - v1
    operations:
    - CREATE
    - UPDATE
    resources:
    - exports
  sideEffects: None
- admissionReviewVersions:
  - v1
  - v1beta1
  clientConfig:
    service:
      name: webhook-service
      namespace: system
      path: /validate-cloud-pingcap-com-v1-import
  failurePolicy: Fail
  name: vimport.kb.io
  rules:
  - apiGroups:
    - cloud.pingcap.com
    apiVersions:
    - v1
    operations:
    - CREATE
    - UPDATE
    resources:
    - imports
  sideEffects: None
- admissionReviewVersions:
  - v1
  - v1beta1
  clientConfig:
    service:
      name: webhook-service
      namespace: system
      path: /validate-cloud-pingcap-com-v1-network
  failurePolicy: Fail
  name: vnetwork.kb.io
  rules:
  - apiGroups:
    - cloud.pingcap.com
    apiVersions:
    - v1
    operations:
    - CREATE
    - UPDATE
    resources:
    - networks
  sideEffects: None
- admissionReviewVersions:
  - v1
  - v1beta1
  clientConfig:
    service:
      name: webhook-service
      namespace: system
      path: /validate-cloud-pingcap-com-v1-networkpeer
  failurePolicy: Fail
  name: vnetworkpeer.kb.io
  rules:
  - apiGroups:
    - cloud.pingcap.com
    apiVersions:
    - v1
    operations:
    - CREATE
    - UPDATE
    resources:
    - networkpeers
  sideEffects: None
- admissionReviewVersions:
  - v1
  - v1beta1
  clientConfig:
    service:
      name: webhook-service
      namespace: system
      path: /validate-cloud-pingcap-com-v1-provider
  failurePolicy: Fail
  name: vprovider.kb.io
  rules:
  - apiGroups:
    - cloud.pingcap.com
    apiVersions:
    - v1
    operations:
    - CREATE
    - UPDATE
    resources:
    - providers
  sideEffects: None
- admissionReviewVersions:
  - v1
  - v1beta1
  clientConfig:
    service:
      name: webhook-service
      namespace: system
      path: /validate-cloud-pingcap-com-v1-providertype
  failurePolicy: Fail
  name: vprovidertype.kb.io
  rules:
  - apiGroups:
    - cloud.pingcap.com
    apiVersions:
    - v1
    operations:
    - CREATE
    - UPDATE
    resources:
    - providertypes
  sideEffects: None
- admissionReviewVersions:
  - v1
  - v1beta1
  clientConfig:
    service:
      name: webhook-service
      namespace: system
      path: /validate-cloud-pingcap-com-v1-restore
  failurePolicy: Fail
  name: vrestore.kb.io
  rules:
  - apiGroups:
    - cloud.pingcap.com
    apiVersions:
    - v1
    operations:
    - CREATE
    - UPDATE
    resources:
    - restores
  sideEffects: None
- admissionReviewVersions:
  - v1
  - v1beta1
  clientConfig:
    service:
      name: webhook-service
      namespace: system
      path: /validate-cloud-pingcap-com-v1-ticdc
  failurePolicy: Fail
  name: vticdc.kb.io
  rules:
  - apiGroups:
    - cloud.pingcap.com
    apiVersions:
    - v1
    operations:
    - CREATE
    - UPDATE
    resources:
    - ticdcs
  sideEffects: None
- admissionReviewVersions:
  - v1
  clientConfig:
    service:
      name: webhook-service
      namespace: system
      path: /validate-cloud-pingcap-com-v1-upgradeoperation
  failurePolicy: Fail
  name: vupgradeoperation.kb.io
  rules:
  - apiGroups:
    - cloud.pingcap.com
    apiVersions:
    - v1
    operations:
    - CREATE
    - UPDATE
    resources:
    - upgradeoperations
  sideEffects: None
- admissionReviewVersions:
  - v1
  clientConfig:
    service:
      name: webhook-service
      namespace: system
      path: /validate-cloud-pingcap-com-v1-workflow
  failurePolicy: Fail
  name: vworkflow.kb.io
  rules:
  - apiGroups:
    - cloud.pingcap.com
    apiVersions:
    - v1
    operations:
    - CREATE
    - UPDATE
    resources:
    - workflows
  sideEffects: None
