resourceVersion: resourceVersionValue
  selfLink: selfLinkValue
  uid: uidValue
spec:
  auditAnnotations:
  - key: keyValue
    valueExpression: valueExpressionValue
  failurePolicy: failurePolicyValue
  matchConditions:
  - expression: expressionValue
    name: nameValue
  matchConstraints:
    excludeResourceRules:
    - apiGroups:
      - apiGroupsValue
      apiVersions:
      - apiVersionsValue
      operations:

	//   1. If ANY matchCondition evaluates to FALSE, the webhook is skipped.
	//   2. If ALL matchConditions evaluate to TRUE, the webhook is called.
	//   3. If any matchCondition evaluates to an error (but none are FALSE):
	//      - If failurePolicy=Fail, reject the request
	//      - If failurePolicy=Ignore, the error is ignored and the webhook is skipped
	//
	// +optional
	MatchConditions []MatchCondition
}

	}); err != nil {
		return err
	}
	if err := s.AddGeneratedConversionFunc((*v1.MatchCondition)(nil), (*admissionregistration.MatchCondition)(nil), func(a, b interface{}, scope conversion.Scope) error {
		return Convert_v1_MatchCondition_To_admissionregistration_MatchCondition(a.(*v1.MatchCondition), b.(*admissionregistration.MatchCondition), scope)
	}); err != nil {
		return err
	}

  // +listMapKey=name
  // +optional
  repeated MatchCondition matchConditions = 6;

  // Variables contain definitions of variables that can be used in composition of other expressions.
  // Each variable is defined as a named CEL expression.
  // The variables defined here will be available under `variables` in other expressions of the policy
  // except MatchConditions because MatchConditions are evaluated before the rest of the policy.
  //

          }
        ]
      },
      "sideEffects": "sideEffectsValue",
      "timeoutSeconds": 7,
      "admissionReviewVersions": [
        "admissionReviewVersionsValue"
      ],
      "matchConditions": [
        {
          "name": "nameValue",
          "expression": "expressionValue"
        }
      ]
    }
  ]

  clientConfig:
    caBundle: Ag==
    service:
      name: nameValue
      namespace: namespaceValue
      path: pathValue
      port: 4
    url: urlValue
  failurePolicy: failurePolicyValue
  matchConditions:
  - expression: expressionValue
    name: nameValue
  matchPolicy: matchPolicyValue
  name: nameValue
  namespaceSelector:
    matchExpressions:
    - key: keyValue
      operator: operatorValue

      "timeoutSeconds": 7,
      "admissionReviewVersions": [
        "admissionReviewVersionsValue"
      ],
      "reinvocationPolicy": "reinvocationPolicyValue",
      "matchConditions": [
        {
          "name": "nameValue",
          "expression": "expressionValue"
        }
      ]
    }
  ]

			matchConditions: []api.WebhookMatchCondition{
				{
					Expression: "has(request.resourceAttributes) && request.resourceAttributes.namespace == 'kube-system'",
				},
				{
					Expression: "request.user == 'admin'",
				},
			},
			featureEnabled: false,

  clientConfig:
    caBundle: Ag==
    service:
      name: nameValue
      namespace: namespaceValue
      path: pathValue
      port: 4
    url: urlValue
  failurePolicy: failurePolicyValue
  matchConditions:
  - expression: expressionValue
    name: nameValue
  matchPolicy: matchPolicyValue
  name: nameValue
  namespaceSelector:
    matchExpressions:
    - key: keyValue
      operator: operatorValue

      }
    ],
    "failurePolicy": "failurePolicyValue",
    "auditAnnotations": [
      {
        "key": "keyValue",
        "valueExpression": "valueExpressionValue"
      }
    ],
    "matchConditions": [
      {
        "name": "nameValue",
        "expression": "expressionValue"
      }
    ],
    "variables": [
      {
        "name": "nameValue",
        "expression": "expressionValue"