apiVersion: admissionregistration.k8s.io/v1
kind: MutatingWebhookConfiguration
metadata:
    annotations:
        cert-manager.io/inject-ca-from-secret: cert-manager/cert-manager-webhook-ca
    labels:
        app: webhook
        app.kubernetes.io/component: webhook
        app.kubernetes.io/instance: cert-manager
        app.kubernetes.io/managed-by: Helm
        app.kubernetes.io/name: webhook
        helm.sh/chart: cert-manager-v1.4.0
    name: cert-manager-webhook
webhooks:
    - admissionReviewVersions:
        - v1
        - v1beta1
      clientConfig:
        service:
            name: cert-manager-webhook
            namespace: cert-manager
            path: /mutate
      failurePolicy: Fail
      name: webhook.cert-manager.io
      rules:
        - apiGroups:
            - cert-manager.io
            - acme.cert-manager.io
          apiVersions:
            - '*'
          operations:
            - CREATE
            - UPDATE
          resources:
            - '*/*'
      sideEffects: None
      timeoutSeconds: 10