apiVersion: admissionregistration.k8s.io/v1 kind: MutatingWebhookConfiguration metadata: creationTimestamp: null name: mutating-webhook-configuration webhooks: - admissionReviewVersions: - v1beta1 - v1 clientConfig: service: name: webhook-service namespace: system path: /mutate--v1-pod failurePolicy: Fail name: namespace.injector.kb.io namespaceSelector: matchExpressions: - key: monitor-injection operator: In values: - enabled objectSelector: matchExpressions: - key: monitor.demo.io/inject operator: NotIn values: - "false" rules: - apiGroups: - "" apiVersions: - v1 operations: - CREATE resources: - pods scope: '*' sideEffects: None - admissionReviewVersions: - v1beta1 - v1 clientConfig: service: name: webhook-service namespace: system path: /mutate--v1-pod failurePolicy: Fail name: object.injector.kb.io namespaceSelector: matchExpressions: - key: monitor-injection operator: DoesNotExist objectSelector: matchExpressions: - key: monitor.demo.io/inject operator: In values: - "true" rules: - apiGroups: - "" apiVersions: - v1 operations: - CREATE resources: - pods scope: '*' sideEffects: None