diff --git a/deployments/kubernetes/webhook.yaml b/deployments/kubernetes/webhook.yaml
index 5ea58ed..0eafd44 100644
--- a/deployments/kubernetes/webhook.yaml
+++ b/deployments/kubernetes/webhook.yaml
@@ -204,6 +204,26 @@ webhooks:
           - "spaces"
         apiVersions:
           - "v1"
+        operations:
+          - CREATE
+          - UPDATE
+  - name: mutating.pods.k8spin.cloud
+    failurePolicy: Fail
+    objectSelector:
+      matchExpressions:
+        - {key: application, operator: NotIn, values: [k8spin-webhook, k8spin-operator]}
+    clientConfig:
+      service:
+        name: k8spin-webhook
+        namespace: default
+        path: /mutator/pods
+      caBundle: Cg==
+    rules:
+      - apiGroups: [""]
+        resources:
+          - "pods"
+        apiVersions:
+          - "v1"
         operations:
           - CREATE
           - UPDATE
\ No newline at end of file