apiVersion: admissionregistration.k8s.io/v1
kind: MutatingWebhookConfiguration
metadata:
  name: workflow-mutating-webhook-configuration
  labels:
    cp9.tidbcloud.com/dedicated-webhook: "true"
webhooks:
  - admissionReviewVersions:
      - v1
    clientConfig:
      service:
        name: webhook-server
        namespace: cp9-dedicated
        path: /mutate-cloud-pingcap-com-v1-workflow
    failurePolicy: Fail
    name: mworkflow.kb.io
    rules:
      - apiGroups:
          - cloud.pingcap.com
        apiVersions:
          - v1
        operations:
          - CREATE
        resources:
          - workflows
    sideEffects: None
---
apiVersion: admissionregistration.k8s.io/v1
kind: ValidatingWebhookConfiguration
metadata:
  name: workflow-validating-webhook-configuration
  labels:
    cp9.tidbcloud.com/dedicated-webhook: "true"
webhooks:
  - admissionReviewVersions:
      - v1
    clientConfig:
      service:
        name: webhook-server
        namespace: cp9-dedicated
        path: /validate-cloud-pingcap-com-v1-workflow
    failurePolicy: Fail
    name: vworkflow.kb.io
    rules:
      - apiGroups:
          - cloud.pingcap.com
        apiVersions:
          - v1
        operations:
          - CREATE
          - UPDATE
        resources:
          - workflows
    sideEffects: None