--- apiVersion: admissionregistration.k8s.io/v1 kind: ValidatingWebhookConfiguration metadata: creationTimestamp: "2026-09-18T23:52:30Z" generation: 2 labels: app: multus-admission-controller managedFields: - apiVersion: admissionregistration.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:labels: f:app: {} f:ownerReferences: k:{"uid":"2cd057d2-38e6-4d1c-9ef3-e01c37dbed9e"}: {} f:webhooks: k:{"name":"multus-validating-config.k8s.io"}: .: {} f:admissionReviewVersions: {} f:clientConfig: f:caBundle: {} f:url: {} f:matchConditions: k:{"name":"CreateDeleteOrUpdatedSpec"}: .: {} f:expression: {} f:name: {} k:{"name":"IgnoreDefaultOVNKubernetesNAD"}: .: {} f:expression: {} f:name: {} f:name: {} f:rules: {} f:sideEffects: {} f:timeoutSeconds: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-18T23:53:06Z" name: multus.openshift.io ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 2cd057d2-38e6-4d1c-9ef3-e01c37dbed9e resourceVersion: "3678" uid: b109e9b3-8a9f-42cc-96d5-51baaf1f049b webhooks: - admissionReviewVersions: - v1 clientConfig: caBundle: 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 url: https://multus-admission-controller.clusters-a701e5e5-3182-469b-8350-a9c772142301.svc/validate failurePolicy: Fail matchConditions: - expression: oldObject == null || object == null || has(object.spec) != has(oldObject.spec) || (has(object.spec) && object.spec != oldObject.spec) name: CreateDeleteOrUpdatedSpec - expression: object == null || object.metadata.namespace != "openshift-ovn-kubernetes" || object.metadata.name != "default" name: IgnoreDefaultOVNKubernetesNAD matchPolicy: Equivalent name: multus-validating-config.k8s.io namespaceSelector: {} objectSelector: {} rules: - apiGroups: - k8s.cni.cncf.io apiVersions: - v1 operations: - CREATE - UPDATE resources: - network-attachment-definitions scope: '*' sideEffects: NoneOnDryRun timeoutSeconds: 30