Fix panic in webhook configuration merge during operator upgrades

Fixes an index out of bounds panic in MergeWebhookConfigurationForUpdate
that occurs when the updated webhook configuration contains more webhooks
than the current configuration. This can happen during operator upgrades
when new webhooks are added.

The fix adds bounds checking to skip copying clientConfig for new webhooks
that don't exist in the current configuration, allowing the merge to
complete successfully.

Author: dprince

internal/operator/bindata/merge.go

@@ -60,10 +60,18 @@ func MergeWebhookConfigurationForUpdate(current, updated *uns.Unstructured) erro
 	gvk := updated.GroupVersionKind()
 
 	if gvk.Group == "admissionregistration.k8s.io" && (gvk.Kind == "MutatingWebhookConfiguration" || gvk.Kind == "ValidatingWebhookConfiguration") {
+		currentWebhooks, currentExists := current.Object["webhooks"].([]interface{})
+		if !currentExists {
+			return nil
+		}
 
 		for i, webhook := range updated.Object["webhooks"].([]interface{}) {
+			// Check if the index exists in the current webhooks list
+			if i >= len(currentWebhooks) {
+				continue
+			}
 
-			currentClientConfig := current.Object["webhooks"].([]interface{})[i].(map[string]interface{})["clientConfig"].(map[string]interface{})
+			currentClientConfig := currentWebhooks[i].(map[string]interface{})["clientConfig"].(map[string]interface{})
 			if currentClientConfig != nil {
 				webhook.(map[string]interface{})["clientConfig"] = currentClientConfig
 			}