Webhook request and response

Webhooks are sent as POST requests, with Content-Type: application/json,
with an AdmissionReview API object in the admission.k8s.io API group
serialized to JSON as the body.

Webhooks can specify what versions of AdmissionReview objects they
accept with the admissionReviewVersions field in their configuration:

apiVersion: admissionregistration.k8s.io/v1
kind: ValidatingWebhookConfiguration
webhooks:
- name: foo.gocardless.com
  admissionReviewVersions: ["v1", "v1beta1"]

config/base/webhooks/vault.yaml

@@ -6,7 +6,7 @@ metadata:
   annotations:
     cert-manager.io/inject-ca-from: theatre-system/theatre-vault-manager
 webhooks:
-  - admissionReviewVersions: ["v1"]
+  - admissionReviewVersions: ["v1", "v1beta1"]
     clientConfig:
       caBundle: Cg==
       service:

config/base/webhooks/workloads.yaml

@@ -6,7 +6,7 @@ metadata:
   annotations:
     cert-manager.io/inject-ca-from: theatre-system/theatre-workloads-manager
 webhooks:
-  - admissionReviewVersions: ["v1"]
+  - admissionReviewVersions: ["v1", "v1beta1"]
     clientConfig:
       caBundle: Cg==
       service:
@@ -30,7 +30,7 @@ webhooks:
           - consoles
         scope: '*'
     sideEffects: None
-  - admissionReviewVersions: ["v1"]
+  - admissionReviewVersions: ["v1", "v1beta1"]
     clientConfig:
       caBundle: Cg==
       service:
@@ -68,7 +68,7 @@ metadata:
   annotations:
     cert-manager.io/inject-ca-from: theatre-system/theatre-workloads-manager
 webhooks:
-  - admissionReviewVersions: ["v1"]
+  - admissionReviewVersions: ["v1", "v1beta1"]
     clientConfig:
       caBundle: Cg==
       service:
@@ -92,7 +92,7 @@ webhooks:
           - consoleauthorisations
         scope: '*'
     sideEffects: None
-  - admissionReviewVersions: ["v1"]
+  - admissionReviewVersions: ["v1", "v1beta1"]
     clientConfig:
       caBundle: Cg==
       service:
@@ -117,7 +117,7 @@ webhooks:
           - consoletemplates
         scope: '*'
     sideEffects: None
-  - admissionReviewVersions: ["v1"]
+  - admissionReviewVersions: ["v1", "v1beta1"]
     clientConfig:
       caBundle: Cg==
       service: