--- apiVersion: admissionregistration.k8s.io/v1 kind: ValidatingWebhookConfiguration metadata: creationTimestamp: "2026-09-17T17:28:59Z" generation: 2 labels: app: multus-admission-controller managedFields: - apiVersion: admissionregistration.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:labels: f:app: {} f:ownerReferences: k:{"uid":"88be1cc0-c840-49c8-9a48-e934757fc695"}: {} f:webhooks: k:{"name":"multus-validating-config.k8s.io"}: .: {} f:admissionReviewVersions: {} f:clientConfig: f:caBundle: {} f:url: {} f:matchConditions: k:{"name":"CreateDeleteOrUpdatedSpec"}: .: {} f:expression: {} f:name: {} k:{"name":"IgnoreDefaultOVNKubernetesNAD"}: .: {} f:expression: {} f:name: {} f:name: {} f:rules: {} f:sideEffects: {} f:timeoutSeconds: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-17T17:29:29Z" name: multus.openshift.io ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 88be1cc0-c840-49c8-9a48-e934757fc695 resourceVersion: "4505" uid: c65a03b9-e326-470c-a78b-81708ceb039e webhooks: - admissionReviewVersions: - v1 clientConfig: caBundle: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSURQRENDQWlTZ0F3SUJBZ0lJWStkU0tYT0VuckF3RFFZSktvWklodmNOQVFFTEJRQXdKakVTTUJBR0ExVUUKQ3hNSmIzQmxibk5vYVdaME1SQXdEZ1lEVlFRREV3ZHliMjkwTFdOaE1CNFhEVEkyTURreE56RTNNalV4TkZvWApEVE0yTURreE5ERTNNalV4TkZvd0pqRVNNQkFHQTFVRUN4TUpiM0JsYm5Ob2FXWjBNUkF3RGdZRFZRUURFd2R5CmIyOTBMV05oTUlJQklqQU5CZ2txaGtpRzl3MEJBUUVGQUFPQ0FROEFNSUlCQ2dLQ0FRRUEyVldURldnMEk4eGwKTTdMeVMyK0FWT0FGaTROZ3VrUnBGY0NQMFlHMjRpZS9rZU1ZUVoxdWp6b2hVSU92b3VKLzh5Yzkrb2tCdG5yUgp6eDZVRnFBaTdOS2M2d1RLR1BaTncwTkxDS3dpN0dpbzErTldkUVlrVWNwQ1FrYlcweUVGSlZUd3NHL3FhMG93CjRKYTU5MEZERUVxU1lwVERWTXlYTDhSaUxVZmY3VWl6V0JiTTFoWjNWRVdqRVZvenRiclBzdWgwVXc5RUxOcUsKeWJCOWZIbkhRMzlIYjFRNUd6Zm1STkM5TEd5MTBYYkVYaDBDTHljYnM3OUwvdU90QUtLY0FXNVgrS0s4amdCUAptSVBhYk9nMUhSajF6TUNpdEVaenNIY3VVcmhaOFJXdEJqeVFHelh5RElRaWRzdmVVZ3lPUnRLc1I2Uy94OUdRCmVYUzJ0YytwMndJREFRQUJvMjR3YkRBT0JnTlZIUThCQWY4RUJBTUNBcVF3RHdZRFZSMFRBUUgvQkFVd0F3RUIKL3pCSkJnTlZIUTRFUWdSQXRHZjk1bFJYekJITXFkSEs3ZWRoQkkyNzVuNUFFa1BqUUdodW94VXlFTE05cnlqSApyRUNrTlZGdWRQTDkyTS9ZVFJ6Y2NwbUhqSFRkVG0xdmVxcVcwVEFOQmdrcWhraUc5dzBCQVFzRkFBT0NBUUVBCm5qTHNwekZPeGZOUW5ENU5rVTNoclJrS2JVYUtQcG1tbUNtRVZiaUY5NWkrdUIzNU5NUkxseDhGY2ZWSW5POEsKdDZybXgxK0hjUTVpc1NRNUpJWVhIKzd3V0xtUS9oajRQcThOTno4UHd5aW4vWE5ORGxCaTlWejlHdGhDZ2pFUQpOcUlIczZ0ZXRMT0l0ZFZJWmpjUDVxU2F4VmRoZ2pKVTBsV2kvR0p1b2F0eDhWQ0JJRjErQ0lpNGFTdHlNTkxPClhhNkgwc2ZlWTg5Z0R4b0M4NThWckVadWg0ZHRMWlVwaE5jLzg3VEZDeUJwdkxNTlRienF0YlpYbGlHdDJ6U1QKMWJLZW91aGQ3UUNiTEVQaWxHemNxVkdibDl0RGxsQ1JwWHBRbmZRYXZvRkxvdTJLdXlnbm1Vb3lkMVJZSWhwdQpiYUZhTjVWZ0pLRm5mVmtnbldRVy9BPT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQotLS0tLUJFR0lOIENFUlRJRklDQVRFLS0tLS0KTUlJRUFEQ0NBdWlnQXdJQkFnSUlFRFdFVFN3WjU5Z3dEUVlKS29aSWh2Y05BUUVMQlFBd0pqRVNNQkFHQTFVRQpDeE1KYjNCbGJuTm9hV1owTVJBd0RnWURWUVFERXdkeWIyOTBMV05oTUI0WERUSTJNRGt4TnpFM01qWXhNVm9YCkRUSTNNRGt4TnpFM01qWXhNVm93TURFU01CQUdBMVVFQ2hNSmIzQmxibk5vYVdaME1Sb3dHQVlEVlFRREV4RnYKY0dWdWMyaHBablF0YVc1bmNtVnpjekNDQVNJd0RRWUpLb1pJaHZjTkFRRUJCUUFEZ2dFUEFEQ0NBUW9DZ2dFQgpBT0VSMTl3cVFBRTFIdklBdmxUYVZ1eG9NWGM4c2YyNW5SL0RuRVg1NmIxOEdkeldrNkRsZDJxbFBjVU9EZlFzClEvQ0ZRczZjbjIxa3lnWWtYeURmYlNOcWozUHhTZkEvdHc1SENuU2tlQVpWY09ybVJ4K1NtZm5IcHdpWU4vczIKRy9wOWtuUVZuQllFTlhJWWUySHZLa2wrYXpZTTZlaXpLTEV2UFdkTVNQN2NMZHFYL0JNR1lUeUJBMnRLWDNVWApYTlcremRNZnF5MnNKWmNIWHB2UGlOVUMweGtManRTQncwalIyNEgwbm02LytFenhtYWRwS0p3eGczSkNOZGQ3CklYV0ZLTEZVQVRzazNtc3IwL0JsYmV6cThHZEVwYm5ycWNWYmdmYXZCRWFKZnY3VDVDUGxiblFUMVI2TUJOdXMKcUduRVJuR2N2b0xyZkhFQ285Y2V4SUVDQXdFQUFhT0NBU1l3Z2dFaU1BNEdBMVVkRHdFQi93UUVBd0lGb0RBZApCZ05WSFNVRUZqQVVCZ2dyQmdFRkJRY0RBZ1lJS3dZQkJRVUhBd0V3REFZRFZSMFRBUUgvQkFJd0FEQkpCZ05WCkhRNEVRZ1JBTnk2dERGemNuTEVHa2xIckxTR1Y1aHdISFhIZXllNlliL3VvWmRWMFNML1BrYTNMT0N2NmlIYTAKQ25BeklWczU5UElyUlZpa0U4TzBOSFRYVVE2Wk16QkxCZ05WSFNNRVJEQkNnRUMwWi8zbVZGZk1FY3lwMGNydAo1MkVFamJ2bWZrQVNRK05BYUc2akZUSVFzejJ2S01lc1FLUTFVVzUwOHYzWXo5aE5ITnh5bVllTWROMU9iVzk2CnFwYlJNRXNHQTFVZEVRUkVNRUtDUUNvdVlYQndjeTQzTjJZeU1XSTBaUzB3T1dabExUUTFZMll0WWpRMk1DMWoKWW1SbU9UZzNZVEF4WmprdWNISnZaQzVyYjI1bWJIVjRaV0ZoY3k1amIyMHdEUVlKS29aSWh2Y05BUUVMQlFBRApnZ0VCQUI5a1N2RGZxSit1MDdiOWV0cUpadXl4MGdJWXN6TWhWL29ib280Uit4SStRTmNiQk1UcUZVU3NiYlZ5CnVwa1locVk1bjBSQ2FMN2J3L1FRSFNXNVdHWmVOWndtYlJRMG1GRWZaREhLN21zaEcyTUFqWDRZbVhDeXJwWWoKK0tnclloaEdqaUh6ZTQ2c1FnU2pUODRoaUMrMXpNWlh0K1dZT2d6TVp2MEgwNXo5U0d0YlZzZExqM1cva3A4MQplYWRqRTR0L3BzalI3cHJEaG5ZUnJ6RGNLUUIvVFBJcDYzV3RIUFIxRzgrYUFrMjVwYzQ3MFkrWldUbVVQZkdVCk40b00wNFJKZ0dJbm4zbHdPTm9rdGx4VHFoVVdDOU1MSUw2NUl1QS8vdm13U0hTbkg5MS9scWhHUXZkTTNpT1YKUCtodStrMEpJelJYZ0VmMUJLVzZzRUt4eE9BPQotLS0tLUVORCBDRVJUSUZJQ0FURS0tLS0tCg== url: https://multus-admission-controller.clusters-77f21b4e-09fe-45cf-b460-cbdf987a01f9.svc/validate failurePolicy: Fail matchConditions: - expression: oldObject == null || object == null || has(object.spec) != has(oldObject.spec) || (has(object.spec) && object.spec != oldObject.spec) name: CreateDeleteOrUpdatedSpec - expression: object == null || object.metadata.namespace != "openshift-ovn-kubernetes" || object.metadata.name != "default" name: IgnoreDefaultOVNKubernetesNAD matchPolicy: Equivalent name: multus-validating-config.k8s.io namespaceSelector: {} objectSelector: {} rules: - apiGroups: - k8s.cni.cncf.io apiVersions: - v1 operations: - CREATE - UPDATE resources: - network-attachment-definitions scope: '*' sideEffects: NoneOnDryRun timeoutSeconds: 30