apiVersion: admissionregistration.k8s.io/v1
kind: MutatingWebhookConfiguration
metadata:
  name: imagepullsecrets-mutator
  annotations:
    cert-manager.io/inject-ca-from: imagepullsecrets-system/imagepullsecrets-webhook-cert
webhooks:
- name: imagepullsecrets.imagepullsecrets-system.svc
  clientConfig:
    service:
      name: imagepullsecrets-webhook
      namespace: imagepullsecrets-system
      path: "/mutate"
  rules:
  - operations: ["CREATE"]
    apiGroups: [""]
    apiVersions: ["v1"]
    resources: ["pods"]
  failurePolicy: Ignore
  sideEffects: None
  admissionReviewVersions: ["v1", "v1beta1"]
  timeoutSeconds: 5