--- apiVersion: admissionregistration.k8s.io/v1 kind: ValidatingWebhookConfiguration metadata: creationTimestamp: "2026-07-28T17:05:39Z" generation: 2 labels: app: multus-admission-controller managedFields: - apiVersion: admissionregistration.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:labels: f:app: {} f:ownerReferences: k:{"uid":"7a433da6-05b6-4212-b246-e8f4500c4161"}: {} f:webhooks: k:{"name":"multus-validating-config.k8s.io"}: .: {} f:admissionReviewVersions: {} f:clientConfig: f:caBundle: {} f:url: {} f:matchConditions: k:{"name":"CreateDeleteOrUpdatedSpec"}: .: {} f:expression: {} f:name: {} k:{"name":"IgnoreDefaultOVNKubernetesNAD"}: .: {} f:expression: {} f:name: {} f:name: {} f:rules: {} f:sideEffects: {} f:timeoutSeconds: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-07-28T17:06:19Z" name: multus.openshift.io ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 7a433da6-05b6-4212-b246-e8f4500c4161 resourceVersion: "4210" uid: 91fd530c-ce2e-47e7-802f-51c27e83f87d webhooks: - admissionReviewVersions: - v1 clientConfig: caBundle: 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 url: https://multus-admission-controller.clusters-ad4b15d6-f55d-46df-b0e8-d66783c1a934.svc/validate failurePolicy: Fail matchConditions: - expression: oldObject == null || object == null || has(object.spec) != has(oldObject.spec) || (has(object.spec) && object.spec != oldObject.spec) name: CreateDeleteOrUpdatedSpec - expression: object == null || object.metadata.namespace != "openshift-ovn-kubernetes" || object.metadata.name != "default" name: IgnoreDefaultOVNKubernetesNAD matchPolicy: Equivalent name: multus-validating-config.k8s.io namespaceSelector: {} objectSelector: {} rules: - apiGroups: - k8s.cni.cncf.io apiVersions: - v1 operations: - CREATE - UPDATE resources: - network-attachment-definitions scope: '*' sideEffects: NoneOnDryRun timeoutSeconds: 30