--- apiVersion: admissionregistration.k8s.io/v1 kind: ValidatingWebhookConfiguration metadata: creationTimestamp: "2026-04-23T16:31:53Z" generation: 1 labels: app: multus-admission-controller managedFields: - apiVersion: admissionregistration.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:labels: f:app: {} f:ownerReferences: k:{"uid":"e6ac049e-df86-440a-b4ae-4e91d051d52d"}: {} f:webhooks: k:{"name":"multus-validating-config.k8s.io"}: .: {} f:admissionReviewVersions: {} f:clientConfig: f:caBundle: {} f:url: {} f:matchConditions: k:{"name":"CreateDeleteOrUpdatedSpec"}: .: {} f:expression: {} f:name: {} k:{"name":"IgnoreDefaultOVNKubernetesNAD"}: .: {} f:expression: {} f:name: {} f:name: {} f:rules: {} f:sideEffects: {} f:timeoutSeconds: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-04-23T16:31:53Z" name: multus.openshift.io ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: e6ac049e-df86-440a-b4ae-4e91d051d52d resourceVersion: "3577" uid: cddbd963-0f66-40e7-9ce8-c0a41018da62 webhooks: - admissionReviewVersions: - v1 clientConfig: caBundle: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSURQRENDQWlTZ0F3SUJBZ0lJSHVaZGFOb1V4Nkl3RFFZSktvWklodmNOQVFFTEJRQXdKakVTTUJBR0ExVUUKQ3hNSmIzQmxibk5vYVdaME1SQXdEZ1lEVlFRREV3ZHliMjkwTFdOaE1CNFhEVEkyTURReU16RTJNamd6TkZvWApEVE0yTURReU1ERTJNamd6TkZvd0pqRVNNQkFHQTFVRUN4TUpiM0JsYm5Ob2FXWjBNUkF3RGdZRFZRUURFd2R5CmIyOTBMV05oTUlJQklqQU5CZ2txaGtpRzl3MEJBUUVGQUFPQ0FROEFNSUlCQ2dLQ0FRRUE0ak1zbUY4bzNGbGMKdWtSWE1Qa3RKWTFXRUV5VE4vbjM0YmFQSjVwaVNnenVhOUh5OG9xOWNDQ283c0tPOWw4NDZ0SWNpTnhpWWt6Mgo3c0pKQWExNzJwWVVLZjh1TGpVdGtvOFUvY0hpT3ZDT1ZkcGVtZEtyMXRjYTAwMTFRbHR4eHowdjhBd1dUNkpqCnlJeDdDSG03ejRPOUtUN1FnNGZiL0dwNnpwTUl4cG1LUm52a3R4UDVIc3Y3UUJUMkRLU28zcjUzcm9oZFQ4SFMKY0lnYW9HRWtWN25zKzhJRUJEZnB4YzdQN1AzZytXZGFCbmFSWUJlNG5DSlc3S0hHSGtsN3JrR2QyOVQ2TGIzQQpGWHdQWGFlZTQyWHBTS3RoWjIxdmo0RXpvLzdlSS82Ty83UDdxcS9ocGc0ZUxjMnlQMU9tOGtacGRHNkM2bjdQClFwU0JucFFYendJREFRQUJvMjR3YkRBT0JnTlZIUThCQWY4RUJBTUNBcVF3RHdZRFZSMFRBUUgvQkFVd0F3RUIKL3pCSkJnTlZIUTRFUWdSQUh1NThEbld0U1UrVGNjNWF5eThlSEZZRktiZGRvSUZnYkppekdWZkNlQmRQQW9tYwpHdjZ3ZW41QSsyYVN4S1NmMEJLWmlRNGxTRG5nYmpFNDNJL283VEFOQmdrcWhraUc5dzBCQVFzRkFBT0NBUUVBCm5PSzl5S3NOaFF1V1pvWkdVZlA1TzZtalByQmM1cFBZUi8yakd5ak5YaXh3TXp3OFFoZThvOTE5dTFjVjJneEEKSXRTTk01cWgxWEhkQjN3a2Y2b1E0STNaWFovZzVoY2pRc1BCVHZKUFUvL01sc3g1SnI4Mm5lMGJYYWRtK3dkYgphVFJHd1d5M0IrT0h0UXF0ZzNMZ2RkVTFYbTNaWDg4dkREZDRQVkc0cmhGM1psYjVwSlVPdldWK1E4TjJCSFZFCmgzOVpINEUwWjRpeE94TzBFSjlicjRmR0RhcWJrTFlBY2N4eDl0NlFQSGNUanNWU25LWDJLSDNkcVZoNVdKTXEKV1hrTmx4OE5CT1crT0hxbEdZQlA4Y3R4cm0wRUhBcGd5ZzJSL2E4a0RMKzQrOFViMzdoZm1hUjJvNWVPdVo2QwpBLzVVcHJGZUxKOXVFMllVNUlMOHVnPT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQotLS0tLUJFR0lOIENFUlRJRklDQVRFLS0tLS0KTUlJRUFEQ0NBdWlnQXdJQkFnSUllK3BldjZZU2JRWXdEUVlKS29aSWh2Y05BUUVMQlFBd0pqRVNNQkFHQTFVRQpDeE1KYjNCbGJuTm9hV1owTVJBd0RnWURWUVFERXdkeWIyOTBMV05oTUI0WERUSTJNRFF5TXpFMk1qa3hObG9YCkRUSTNNRFF5TXpFMk1qa3hObG93TURFU01CQUdBMVVFQ2hNSmIzQmxibk5vYVdaME1Sb3dHQVlEVlFRREV4RnYKY0dWdWMyaHBablF0YVc1bmNtVnpjekNDQVNJd0RRWUpLb1pJaHZjTkFRRUJCUUFEZ2dFUEFEQ0NBUW9DZ2dFQgpBTlk2RGJSd2NEMVZXekVQVTZBU2NOcWVUdWtUeGRxWGFISXhwRFhjVlhhTnp0NnRjY0lXcmYyRHpRWXFmR29XClM5ckIramNqakNlSFE5bnVFTnpKVUNleko1bUxOWExuTG42OXFlQW04Z2dmbTBZZG5QT2FCYzZuUFozaEY3UCsKdjRtQm1jRTVvREFYTFRwREozTHZlU3Y5YnBxT0lQU2tRRDAvQ1dwczBRT3l5V2tCbTRHckdKL1hlZmZUYU15aQo1NjFZZlRuMWNuK0FRVkp4YWc0R29sT1Z0UWt4RUQzb25xZTBDakxQVDYzQjlJQ3hHeXgrYlI4R2F2R2NRczl3CkN0czlnTGVtWk0zVHlPM2hEWVg0bTNLQjhiR1BpSEs3NC93R2FaK0ExdGp1Nit6Y0tWUU94a1ZlOFg3azVpOEYKUVFTSjdDYkpnelVVSjA3ZXdTdmI2T2NDQXdFQUFhT0NBU1l3Z2dFaU1BNEdBMVVkRHdFQi93UUVBd0lGb0RBZApCZ05WSFNVRUZqQVVCZ2dyQmdFRkJRY0RBZ1lJS3dZQkJRVUhBd0V3REFZRFZSMFRBUUgvQkFJd0FEQkpCZ05WCkhRNEVRZ1JBS3E1YnNmQTA2NWFoWGRLU1ZOMTdEd0xoUGRGek1YMGpCVXp5dFBtZmNHbU9vd2VlMXgzbkhQb1YKZHYvQjFIWmlHb3R5ZXczK1g1VmFJelNVcXRvbXNUQkxCZ05WSFNNRVJEQkNnRUFlN253T2RhMUpUNU54emxyTApMeDRjVmdVcHQxMmdnV0JzbUxNWlY4SjRGMDhDaVp3YS9yQjZma0Q3WnBMRXBKL1FFcG1KRGlWSU9lQnVNVGpjCmoranRNRXNHQTFVZEVRUkVNRUtDUUNvdVlYQndjeTR6Wm1GbU9HUTFOUzFpWlRrMkxUUmhPRFF0T1RFM05pMDAKTWpZek0yUTFORE5pWlRBdWNISnZaQzVyYjI1bWJIVjRaV0ZoY3k1amIyMHdEUVlKS29aSWh2Y05BUUVMQlFBRApnZ0VCQU5GN2E1YzZrTjRjWURIeit2WkJad3ZRMitaWnQ3T1ZtWE1DeDlyWFVVZlJ4NGl6VjZwa0ZXQXBxbkZlClUwUlMvOUJSK2tWcm4waERjdDVGcktzUlFaMzNZL0gvT1VYcWFjQlhSTUdqWGF1cU5GQVVsZFQ3WGlVdDI4RVQKa0x6WnIzK3NHYWFNMHIyVTRXbTlLTVpkMXROaXJKelkzdklUQWVZNWlZdWRwbkwxOXFaNnpBS0wvc0c3aElmVQo5TlJkeW1ONUVCaVMxSWFXR1kyRjA5dzVDSmhickx2MW43L0ZMSy9vc2NXZEVBRDRTVUM5ZFM0U25rOFZiMExICmRnLy9JWGdrZWJaTkcwMCs0UGU1ajQzeUE2OVhqQnJkdDJ0YmxDNmxxaGdFM1hQeEVqWmZvY3BqNG90OG5iNzAKeUQ5dmY4bkljUmU2RktqTGFhUDRBazlsYWNjPQotLS0tLUVORCBDRVJUSUZJQ0FURS0tLS0tCg== url: https://multus-admission-controller.clusters-3faf8d55-be96-4a84-9176-42633d543be0.svc/validate failurePolicy: Fail matchConditions: - expression: oldObject == null || object == null || has(object.spec) != has(oldObject.spec) || (has(object.spec) && object.spec != oldObject.spec) name: CreateDeleteOrUpdatedSpec - expression: object == null || object.metadata.namespace != "openshift-ovn-kubernetes" || object.metadata.name != "default" name: IgnoreDefaultOVNKubernetesNAD matchPolicy: Equivalent name: multus-validating-config.k8s.io namespaceSelector: {} objectSelector: {} rules: - apiGroups: - k8s.cni.cncf.io apiVersions: - v1 operations: - CREATE - UPDATE resources: - network-attachment-definitions scope: '*' sideEffects: NoneOnDryRun timeoutSeconds: 30