--- apiVersion: admissionregistration.k8s.io/v1 kind: ValidatingWebhookConfiguration metadata: creationTimestamp: "2026-09-10T23:30:45Z" generation: 2 labels: app: multus-admission-controller managedFields: - apiVersion: admissionregistration.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:labels: f:app: {} f:ownerReferences: k:{"uid":"95370e3b-0512-49d5-a98f-c886a9ad34a1"}: {} f:webhooks: k:{"name":"multus-validating-config.k8s.io"}: .: {} f:admissionReviewVersions: {} f:clientConfig: f:caBundle: {} f:url: {} f:matchConditions: k:{"name":"CreateDeleteOrUpdatedSpec"}: .: {} f:expression: {} f:name: {} k:{"name":"IgnoreDefaultOVNKubernetesNAD"}: .: {} f:expression: {} f:name: {} f:name: {} f:rules: {} f:sideEffects: {} f:timeoutSeconds: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-10T23:31:33Z" name: multus.openshift.io ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 95370e3b-0512-49d5-a98f-c886a9ad34a1 resourceVersion: "4321" uid: 0f126939-4efc-438c-ba71-306530d7d4fa webhooks: - admissionReviewVersions: - v1 clientConfig: caBundle: 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 url: https://multus-admission-controller.clusters-f8ad7e08-581b-40a1-ad26-fa26a78d8335.svc/validate failurePolicy: Fail matchConditions: - expression: oldObject == null || object == null || has(object.spec) != has(oldObject.spec) || (has(object.spec) && object.spec != oldObject.spec) name: CreateDeleteOrUpdatedSpec - expression: object == null || object.metadata.namespace != "openshift-ovn-kubernetes" || object.metadata.name != "default" name: IgnoreDefaultOVNKubernetesNAD matchPolicy: Equivalent name: multus-validating-config.k8s.io namespaceSelector: {} objectSelector: {} rules: - apiGroups: - k8s.cni.cncf.io apiVersions: - v1 operations: - CREATE - UPDATE resources: - network-attachment-definitions scope: '*' sideEffects: NoneOnDryRun timeoutSeconds: 30