register the service for the webhook instead of registering the webhook's address

1 files changed, 10 insertions, 3 deletions

diff --git a/contributors/design-proposals/dynamic-admission-control-configuration.md b/contributors/design-proposals/dynamic-admission-control-configuration.md
index 82a01fd4..4b9559e7 100644
--- a/contributors/design-proposals/dynamic-admission-control-configuration.md
+++ b/contributors/design-proposals/dynamic-admission-control-configuration.md
@@ -112,13 +112,20 @@ const (
 // AdmissionHookClientConfig contains the information to make a TLS
 // connection with the webhook
 type AdmissionHookClientConfig struct {
-	// Address of the external admission hook, could be a host string, 
-    // a host:port pair, or a URL.
-	Address string
+    // Service is a reference to the service for this webhook. It must communicate
+	// on port 443
+	Service ServiceReference
 	// CABundle is a PEM encoded CA bundle which will be used to validate webhook's server certificate.
 	CABundle []byte
 }
 
+// ServiceReference holds a reference to Service.legacy.k8s.io
+type ServiceReference struct {
+	// Namespace is the namespace of the service
+	Namespace string
+	// Name is the name of the service
+	Name string
+}
 ```
 
 ## Synchronization of AdmissionControlConfiguration (**optional for alpha implement**)