"objectRef.apiGroup":admissionregistration.k8s.io ("objectRef.resource":mutatingwebhookconfigurations OR "objectRef.resource":validatingwebhookconfigurations) (verb:create OR verb:delete OR verb:patch OR verb:replace OR verb:update)