---
apiVersion: admissionregistration.k8s.io/v1beta1
kind: MutatingWebhookConfiguration
metadata:
  name: kubesphere-iam-validator
webhooks:
  - admissionReviewVersions:
      - v1beta1
    clientConfig:
      caBundle: <caBundle>
      service:
        name: webhook-service
        namespace: kubesphere-system
        path: /validate-email-iam-kubesphere-io-v1alpha2-user
    failurePolicy: Fail
    name: vemail.iam.kubesphere.io
    rules:
      - apiGroups:
          - iam.kubesphere.io
        apiVersions:
          - v1alpha2
        operations:
          - CREATE
          - UPDATE
        resources:
          - users

---
apiVersion: admissionregistration.k8s.io/v1beta1
kind: MutatingWebhookConfiguration
metadata:
  name: kubesphere-iam-injector
webhooks:
  - admissionReviewVersions:
      - v1beta1
    clientConfig:
      caBundle: <caBundle>
      service:
        name: webhook-service
        namespace: kubesphere-system
        path: /mutating-encrypt-password-iam-kubesphere-io-v1alpha2-user
    failurePolicy: Fail
    name: mpassword.iam.kubesphere.io
    reinvocationPolicy: Never
    rules:
      - apiGroups:
          - iam.kubesphere.io
        apiVersions:
          - v1alpha2
        operations:
          - CREATE
          - UPDATE
        resources:
          - users