apiVersion: admissionregistration.k8s.io/v1
kind: MutatingWebhookConfiguration
metadata:
  name: configchange-mutating-webhook-configuration
  labels:
    cp9.tidbcloud.com/dedicated-webhook: "true"
webhooks:
  - admissionReviewVersions:
      - v1
      - v1beta1
    clientConfig:
      service:
        name: webhook-server
        namespace: cp9-dedicated
        path: /mutate-cloud-pingcap-com-v1-configchange
    failurePolicy: Fail
    name: mconfigchange.kb.io
    rules:
      - apiGroups:
          - cloud.pingcap.com
        apiVersions:
          - v1
        operations:
          - CREATE
          - UPDATE
        resources:
          - configchanges
    sideEffects: None
---
apiVersion: admissionregistration.k8s.io/v1
kind: ValidatingWebhookConfiguration
metadata:
  name: configchange-validating-webhook-configuration
  labels:
    cp9.tidbcloud.com/dedicated-webhook: "true"
webhooks:
  - admissionReviewVersions:
      - v1
      - v1beta1
    clientConfig:
      service:
        name: webhook-server
        namespace: cp9-dedicated
        path: /validate-cloud-pingcap-com-v1-configchange
    failurePolicy: Fail
    name: vconfigchange.kb.io
    rules:
      - apiGroups:
          - cloud.pingcap.com
        apiVersions:
          - v1
        operations:
          - CREATE
          - UPDATE
        resources:
          - configchanges
    sideEffects: None