apiVersion: admissionregistration.k8s.io/v1beta1
kind: ValidatingWebhookConfiguration
metadata:
  name: gardener-seed-admission-controller
  labels:
    app: gardener
    role: seed-admission-controller
webhooks:
- name: crds.seed.admission.core.gardener.cloud
  rules:
  - apiGroups:
    - apiextensions.k8s.io
    apiVersions:
    - v1beta1
    - v1
    operations:
    - DELETE
    resources:
    - customresourcedefinitions
  failurePolicy: Fail
  {{- if semverCompare ">= 1.15-0" .Capabilities.KubeVersion.GitVersion }}
  objectSelector:
    matchLabels:
      gardener.cloud/deletion-protected: "true"
  {{- end }}
  namespaceSelector: {}
  clientConfig:
    caBundle: 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
    service:
      name: gardener-seed-admission-controller
      namespace: garden
      path: /webhooks/validate-extension-crd-deletion
- name: crs.seed.admission.core.gardener.cloud
  rules:
  - apiGroups:
    - extensions.gardener.cloud
    apiVersions:
    - v1alpha1
    operations:
    - DELETE
    resources:
    - backupbuckets
    - backupentries
    - containerruntimes
    - controlplanes
    - extensions
    - infrastructures
    - networks
    - operatingsystemconfigs
    - workers
  failurePolicy: Fail
  namespaceSelector: {}
  clientConfig:
    caBundle: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUNwakNDQVk0Q0NRQ1J1blpETFYwUWV6QU5CZ2txaGtpRzl3MEJBUXNGQURBVk1STXdFUVlEVlFRRERBcHIKZFdKbGNtNWxkR1Z6TUI0WERUSTBNREl5TnpBNU5ETTFNbG9YRFRNek1URXlOakE1TkRNMU1sb3dGVEVUTUJFRwpBMVVFQXd3S2EzVmlaWEp1WlhSbGN6Q0NBU0l3RFFZSktvWklodmNOQVFFQkJRQURnZ0VQQURDQ0FRb0NnZ0VCCkFMZUpjV1ExSm1EaHNHL3o4MCs5YXdKc05zVlI5V2JOMW1qcGJqQnZyQSt4YVhxaTJ5SlZWWjV0WittaWxKTXAKeTVCZUlCZDZKMnJWL0NSZnZ2bUM5OVJwQ3ZLNUVDSlYvSTlmejQ0T0dzQ1h5MkNpOHBrSFZ6VlBjM2pUOXgvdApJakl5US80YTZ4NlJBdFZ6bTU3TVEvczJUbzI2QnhiWW5aQmkzV0dKdHd4WGRlNWlNeVYyNDBKVnI4RGZ3cGhTCmZHSlRJK3ZQK0g1WDJPa0pXL3c5Vzl1b0hQS090ZUc4UkJWNW1jU01tTVkzdDBMR2tPcmdTTjl2eDJsTUZRdHgKWTMrbkxhazFnbEZHbFpBN2hwYy9RSkNWZ1Q4eXJoTmpySEN6UW05K0tSNnhKejFJSU5UeDhnTlh2UkVvRlNrSApnblcxSlB6S0s3aTFkeTdVRzJybzFIMENBd0VBQVRBTkJna3Foa2lHOXcwQkFRc0ZBQU9DQVFFQXNpY2Z3ZEMyCmJXcjRGdHdSU1J2NXBNL3dXUU81ajBTNzVQSXgxSGowNTBUVFhXUURwcnhTNjB6cmdKK3FzbVVON2VoeEdmZmMKVVFvU1VNUTl2YWFYZ3UzZDZqaGtBMW42Y2F6WC95bmUvL2Y1Y3hrVmluMHpqTnZKVzBaMW42ZkMvWnExdDl4Sgp6WU9lUktMR0FiVmhnanBIMUFTMG5yWWVrcnhEay9DRnJ1NkVXOVk3QlR1d1ZRbFhpV3BZd0NTeENUUytldlBjCmpqZlZQSFJhTUdHUTBhMGFYYVNaS0FTZkRIVVp4MkFRVEpWblJqckRJMHFZRDJ1SklwVGNFamwrSXhoZ01DZ0gKTW41c0Z2bjJNQ0lJZGpWSVlpL1RSbWhRY0hDRnA3Q09sRzZEVTdWNGlncGJkN21jNXk5dDBxSEJlRS96bUFYcAppQkdVOW1zcitUaVpIdz09Ci0tLS0tRU5EIENFUlRJRklDQVRFLS0tLS0K
    service:
      name: gardener-seed-admission-controller
      namespace: garden
      path: /webhooks/validate-extension-crd-deletion