---
apiVersion: admissionregistration.k8s.io/v1
kind: ValidatingWebhookConfiguration
metadata:
  labels:
    app.kubernetes.io/instance: external-secrets
    app.kubernetes.io/name: external-secrets-webhook
    app.kubernetes.io/version: v0.15.1
    external-secrets.io/component: webhook
  name: secretstore-validate
webhooks:
  - admissionReviewVersions:
      - v1
      - v1beta1
    clientConfig:
      service:
        name: external-secrets-webhook
        namespace: external-secrets
        path: /validate-external-secrets-io-v1beta1-secretstore
    name: validate.secretstore.external-secrets.io
    rules:
      - apiGroups:
          - external-secrets.io
        apiVersions:
          - v1beta1
        operations:
          - CREATE
          - UPDATE
          - DELETE
        resources:
          - secretstores
        scope: Namespaced
    sideEffects: None
    timeoutSeconds: 5
  - admissionReviewVersions:
      - v1
      - v1beta1
    clientConfig:
      service:
        name: external-secrets-webhook
        namespace: external-secrets
        path: /validate-external-secrets-io-v1beta1-clustersecretstore
    name: validate.clustersecretstore.external-secrets.io
    rules:
      - apiGroups:
          - external-secrets.io
        apiVersions:
          - v1beta1
        operations:
          - CREATE
          - UPDATE
          - DELETE
        resources:
          - clustersecretstores
        scope: Cluster
    sideEffects: None
    timeoutSeconds: 5