diff --git a/api/v1alpha1/tenant_webhook.go b/api/v1alpha1/tenant_webhook.go
new file mode 100644
index 00000000..56575817
--- /dev/null
+++ b/api/v1alpha1/tenant_webhook.go
@@ -0,0 +1,20 @@
+// Copyright 2020-2021 Clastix Labs
+// SPDX-License-Identifier: Apache-2.0
+
+package v1alpha1
+
+import (
+	ctrl "sigs.k8s.io/controller-runtime"
+	logf "sigs.k8s.io/controller-runtime/pkg/log"
+)
+
+// log is for logging in this package.
+var tenantlog = logf.Log.WithName("tenant-resource")
+
+func (r *Tenant) SetupWebhookWithManager(mgr ctrl.Manager) error {
+	return ctrl.NewWebhookManagedBy(mgr).
+		For(r).
+		Complete()
+}
+
+// EDIT THIS FILE!  THIS IS SCAFFOLDING FOR YOU TO OWN!
diff --git a/main.go b/main.go
index 02c540de..540b8f77 100644
--- a/main.go
+++ b/main.go
@@ -135,6 +135,10 @@ func main() {
 		setupLog.Error(err, "unable to create controller", "controller", "Tenant")
 		os.Exit(1)
 	}
+	if err = (&capsulev1alpha1.Tenant{}).SetupWebhookWithManager(manager); err != nil {
+		setupLog.Error(err, "unable to create webhook", "webhook", "Tenant")
+		os.Exit(1)
+	}
 	// +kubebuilder:scaffold:builder
 
 	cfg := configuration.NewCapsuleConfiguration(manager.GetClient(), configurationName)