apiVersion: admissionregistration.k8s.io/v1 kind: MutatingWebhookConfiguration metadata: labels: webhook.kyverno.io/managed-by: kyverno name: kyverno-resource-mutating-webhook-cfg webhooks: - rules: - apiGroups: - '' apiVersions: - v1 operations: - UPDATE resources: - secrets scope: Namespaced - apiGroups: - '*' apiVersions: - '*' operations: - CREATE resources: - '*/scale' scope: '*'