webhook.yaml

apiVersion: admissionregistration.k8s.io/v1
kind: MutatingWebhookConfiguration
metadata:
  name: "mymutatingwebhook.example.com"
webhooks:
- name: "mymutatingwebhook.example.com"
  namespaceSelector:
    matchLabels:
      webhook: enabled
  rules:
  - apiGroups:   [""]
    apiVersions: ["v1"]
    operations:  ["CREATE"]
    resources:   ["pods"]
  clientConfig:
    service:
      namespace: "mutatingwebhook"
      name: "mutatingwebhook"
      path: "/webhook"
    caBundle: "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"
  admissionReviewVersions: ["v1", "v1beta1"]
  sideEffects: None
  timeoutSeconds: 5
---
apiVersion: v1
kind: Namespace
metadata:
  name: mutatingwebhook
---
apiVersion: v1
kind: Namespace
metadata:
  name: testmutatingwebhook
  labels:
    webhook: enabled
---
apiVersion: apps/v1
kind: Deployment
metadata:
  name: mutatingwebhook
  namespace: mutatingwebhook
  labels:
    app: mutatingwebhook
spec:
  replicas: 1
  selector:
    matchLabels:
      app: mutatingwebhook
  template:
    metadata:
      labels:
        app: mutatingwebhook
    spec:
      containers:
      - name: mutatingwebhook
        image: on2411/mutatingwebhook-example
        ports:
        - containerPort: 8443
---
apiVersion: v1
kind: Service
metadata:
  name: mutatingwebhook
  namespace: mutatingwebhook
spec:
  selector:
    app: mutatingwebhook
  ports:
    - protocol: TCP
      port: 443
      targetPort: 8443