{
  "repo": "tidbcloud/cert-manager",
  "binary": "webhook",
  "binary_path": "cmd/webhook/main.go",
  "dependencies": {
    "HTTP GET /healthz": {
      "infrastructure": {},
      "services": []
    },
    "HTTP GET /livez": {
      "infrastructure": {},
      "services": []
    },
    "HTTP POST /validate": {
      "infrastructure": {
        "kubernetes": {
          "conditions": [
            "Always"
          ],
          "operations": [
            {
              "operation": "Serve validating admission requests",
              "trigger": "Kubernetes API server posts AdmissionReview objects",
              "implementation": "server.Server mux.HandleFunc(\"/validate\", s.handle(s.validate))"
            }
          ]
        }
      },
      "services": []
    },
    "HTTP POST /mutate": {
      "infrastructure": {
        "kubernetes": {
          "conditions": [
            "Always"
          ],
          "operations": [
            {
              "operation": "Serve mutating admission requests",
              "trigger": "Kubernetes API server posts AdmissionReview objects",
              "implementation": "server.Server mux.HandleFunc(\"/mutate\", s.handle(s.mutate))"
            }
          ]
        }
      },
      "services": []
    },
    "HTTP POST /convert": {
      "infrastructure": {
        "kubernetes": {
          "conditions": [
            "Always"
          ],
          "operations": [
            {
              "operation": "Serve CRD conversion requests",
              "trigger": "Kubernetes API server posts ConversionReview objects",
              "implementation": "server.Server mux.HandleFunc(\"/convert\", s.handle(s.convert))"
            }
          ]
        },
        "tls_secret": {
          "conditions": [
            "When dynamic TLS is enabled"
          ],
          "operations": [
            {
              "operation": "Generate and rotate serving certificates from a Kubernetes Secret CA",
              "trigger": "Dynamic certificate source is configured",
              "implementation": "tls.DynamicSource with authority.DynamicAuthority using BuildConfigFromFlags and Secret-backed CA"
            }
          ]
        }
      },
      "services": []
    },
    "HTTP GET /debug/pprof/*": {
      "infrastructure": {},
      "services": []
    }
  }
}