"gcp.audit.method_name":admissionregistration.k8s.io.v* ("gcp.audit.method_name":.mutatingwebhookconfigurations.* OR "gcp.audit.method_name":.validatingwebhookconfigurations.*) ("gcp.audit.method_name":create OR "gcp.audit.method_name":patch OR "gcp.audit.method_name":replace)