I am sorry, but I would propose a different group name.
dynu-webhook.cert-manager.io
or
dynu.webhook.cert-manager.io
Why? Here is a list of my apiservices...
$ kubectl get apiservices.apiregistration.k8s.io |grep v1a
v1alpha1.argoproj.io Local True 4d1h
v1alpha1.autoscaling.internal.knative.dev Local True 4d1h
v1alpha1.binding.operators.coreos.com Local True 11d
v1alpha1.caching.internal.knative.dev Local True 9d
v1alpha1.camel.apache.org Local True 9d
v1alpha1.cdi.kubevirt.io Local True 4d1h
v1alpha1.com.github.dopingus.cert-manager-webhook-dynu openshift-cert-manager/cert-manager-dynu-webhook True 34m
v1alpha1.config.openshift.io Local True 4d1h
v1alpha1.console.openshift.io Local True 4d1h
v1alpha1.controller.devfile.io Local True 4d1h
v1alpha1.controlplane.operator.openshift.io Local True 4d1h
v1alpha1.flows.netobserv.io Local True 4d1h
v1alpha1.integreatly.org Local True 4d1h
v1alpha1.kafka.strimzi.io Local True 4d1h
v1alpha1.keycloak.org Local True 9d
v1alpha1.kiali.io Local True 4d1h
v1alpha1.metal3.io Local True 11d
v1alpha1.migration.k8s.io Local True 4d1h
v1alpha1.monitoring.coreos.com Local True 9d
v1alpha1.monitoring.kiali.io Local True 9d
v1alpha1.networking.internal.knative.dev Local True 4d1h
v1alpha1.nfd.openshift.io Local True 11d
v1alpha1.nmstate.io Local True 4d1h
v1alpha1.operator.knative.dev Local True 9d
v1alpha1.operator.openshift.io Local True 11d
v1alpha1.operator.serverless.openshift.io Local True 4d1h
v1alpha1.operator.tekton.dev Local True 4d1h
v1alpha1.operators.coreos.com Local True 4d1h
v1alpha1.performance.openshift.io Local True 4d1h
v1alpha1.pipelines.openshift.io Local True 4d1h
v1alpha1.pipelinesascode.tekton.dev Local True 4d1h
v1alpha1.resolution.tekton.dev Local True 4d1h
v1alpha1.secscan.quay.redhat.com Local True 4d1h
v1alpha1.serving.knative.dev Local True 11d
v1alpha1.tackle.konveyor.io Local True 11d
v1alpha1.tekton.dev Local True 4d1h
v1alpha1.topology.node.k8s.io Local True 11d
v1alpha1.triggers.tekton.dev Local True 9d
v1alpha1.whereabouts.cni.cncf.io Local True 9d
v1alpha1.workspace.devfile.io Local True 4d1h
v1alpha2.operators.coreos.com Local True 4d1h
v1alpha2.workspace.devfile.io Local True 4d1h
v1alpha3.servicebinding.io Local True 4d1h
$ kubectl get apiservices.apiregistration.k8s.io |grep cert-manager
v1.acme.cert-manager.io Local True 11d
v1.cert-manager.io Local True 4d1h
v1alpha1.com.github.dopingus.cert-manager-webhook-dynu openshift-cert-manager/cert-manager-dynu-webhook True 36m
I am sorry, but I would propose a different group name.
dynu-webhook.cert-manager.io or dynu.webhook.cert-manager.io
Why? Here is a list of my apiservices...