--- apiVersion: admissionregistration.k8s.io/v1 kind: ValidatingWebhookConfiguration metadata: creationTimestamp: "2026-09-17T19:01:15Z" generation: 1 labels: app: multus-admission-controller managedFields: - apiVersion: admissionregistration.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:labels: f:app: {} f:ownerReferences: k:{"uid":"623ca6dd-adc0-41bd-a57c-030e8e2175db"}: {} f:webhooks: k:{"name":"multus-validating-config.k8s.io"}: .: {} f:admissionReviewVersions: {} f:clientConfig: f:caBundle: {} f:url: {} f:matchConditions: k:{"name":"CreateDeleteOrUpdatedSpec"}: .: {} f:expression: {} f:name: {} k:{"name":"IgnoreDefaultOVNKubernetesNAD"}: .: {} f:expression: {} f:name: {} f:name: {} f:rules: {} f:sideEffects: {} f:timeoutSeconds: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-17T19:01:15Z" name: multus.openshift.io ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 623ca6dd-adc0-41bd-a57c-030e8e2175db resourceVersion: "3401" uid: ee68feaf-9a2c-4bf3-9589-f738e64791e5 webhooks: - admissionReviewVersions: - v1 clientConfig: caBundle: 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 url: https://multus-admission-controller.clusters-294bc51e-094b-4f51-917e-c068fae3c131.svc/validate failurePolicy: Fail matchConditions: - expression: oldObject == null || object == null || has(object.spec) != has(oldObject.spec) || (has(object.spec) && object.spec != oldObject.spec) name: CreateDeleteOrUpdatedSpec - expression: object == null || object.metadata.namespace != "openshift-ovn-kubernetes" || object.metadata.name != "default" name: IgnoreDefaultOVNKubernetesNAD matchPolicy: Equivalent name: multus-validating-config.k8s.io namespaceSelector: {} objectSelector: {} rules: - apiGroups: - k8s.cni.cncf.io apiVersions: - v1 operations: - CREATE - UPDATE resources: - network-attachment-definitions scope: '*' sideEffects: NoneOnDryRun timeoutSeconds: 30