--- apiVersion: admissionregistration.k8s.io/v1 kind: ValidatingWebhookConfiguration metadata: creationTimestamp: "2026-09-16T17:39:11Z" generation: 1 labels: app: multus-admission-controller managedFields: - apiVersion: admissionregistration.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:labels: f:app: {} f:ownerReferences: k:{"uid":"752b7052-131e-4702-bf6e-4a331e275b57"}: {} f:webhooks: k:{"name":"multus-validating-config.k8s.io"}: .: {} f:admissionReviewVersions: {} f:clientConfig: f:caBundle: {} f:url: {} f:matchConditions: k:{"name":"CreateDeleteOrUpdatedSpec"}: .: {} f:expression: {} f:name: {} k:{"name":"IgnoreDefaultOVNKubernetesNAD"}: .: {} f:expression: {} f:name: {} f:name: {} f:rules: {} f:sideEffects: {} f:timeoutSeconds: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-16T17:39:11Z" name: multus.openshift.io ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 752b7052-131e-4702-bf6e-4a331e275b57 resourceVersion: "2406" uid: 5eb9d36e-2e04-4a0f-a9c6-73bc31c920b7 webhooks: - admissionReviewVersions: - v1 clientConfig: caBundle: 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 url: https://multus-admission-controller.clusters-d4414b9c-f50d-4672-809b-960d47ab07bd.svc/validate failurePolicy: Fail matchConditions: - expression: oldObject == null || object == null || has(object.spec) != has(oldObject.spec) || (has(object.spec) && object.spec != oldObject.spec) name: CreateDeleteOrUpdatedSpec - expression: object == null || object.metadata.namespace != "openshift-ovn-kubernetes" || object.metadata.name != "default" name: IgnoreDefaultOVNKubernetesNAD matchPolicy: Equivalent name: multus-validating-config.k8s.io namespaceSelector: {} objectSelector: {} rules: - apiGroups: - k8s.cni.cncf.io apiVersions: - v1 operations: - CREATE - UPDATE resources: - network-attachment-definitions scope: '*' sideEffects: NoneOnDryRun timeoutSeconds: 30