
apiVersion: admissionregistration.k8s.io/v1
kind: MutatingWebhookConfiguration
metadata:
  name: nameinjector.webhook.svc
webhooks:
  - name: nameinjector.webhook.svc
    rules:
      - apiGroups:   ["stable.example.com"]
        apiVersions: ["v1alpha1"]
        operations:  ["CREATE", "UPDATE"]
        resources:   ["kubeapis"]
    clientConfig:
      service:
        namespace: name-injector
        name: name-injector-webhook-svc
        path: /mutate
      caBundle: ${CA_BUNDLE}
    admissionReviewVersions: ["v1", "v1beta1"]
    sideEffects: None
    timeoutSeconds: 5