The current webhook failure policy set by the mutating webhook is None. If a pod can't be patched by the webhook, no failure will happen.

This was a safety measure we wanted to implement to avoid 'bricking' an entire cluster if the operator does not behave correctly.

It would be ideal if we could avoid using that policy, guaranteeing the cluster doesn't brick.