--- apiVersion: admissionregistration.k8s.io/v1 kind: ValidatingWebhookConfiguration metadata: creationTimestamp: "2026-07-09T18:50:06Z" generation: 2 labels: app: multus-admission-controller managedFields: - apiVersion: admissionregistration.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:labels: f:app: {} f:ownerReferences: k:{"uid":"a8c9dc02-1f06-4127-81e9-49f02d24c921"}: {} f:webhooks: k:{"name":"multus-validating-config.k8s.io"}: .: {} f:admissionReviewVersions: {} f:clientConfig: f:caBundle: {} f:url: {} f:matchConditions: k:{"name":"CreateDeleteOrUpdatedSpec"}: .: {} f:expression: {} f:name: {} k:{"name":"IgnoreDefaultOVNKubernetesNAD"}: .: {} f:expression: {} f:name: {} f:name: {} f:rules: {} f:sideEffects: {} f:timeoutSeconds: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-07-09T18:50:32Z" name: multus.openshift.io ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: a8c9dc02-1f06-4127-81e9-49f02d24c921 resourceVersion: "4535" uid: 23929b87-2803-4612-bcbe-39809b165a5c webhooks: - admissionReviewVersions: - v1 clientConfig: caBundle: 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 url: https://multus-admission-controller.clusters-7d556590-257c-4383-a90d-093390157c5b.svc/validate failurePolicy: Fail matchConditions: - expression: oldObject == null || object == null || has(object.spec) != has(oldObject.spec) || (has(object.spec) && object.spec != oldObject.spec) name: CreateDeleteOrUpdatedSpec - expression: object == null || object.metadata.namespace != "openshift-ovn-kubernetes" || object.metadata.name != "default" name: IgnoreDefaultOVNKubernetesNAD matchPolicy: Equivalent name: multus-validating-config.k8s.io namespaceSelector: {} objectSelector: {} rules: - apiGroups: - k8s.cni.cncf.io apiVersions: - v1 operations: - CREATE - UPDATE resources: - network-attachment-definitions scope: '*' sideEffects: NoneOnDryRun timeoutSeconds: 30