--- apiVersion: admissionregistration.k8s.io/v1 kind: ValidatingWebhookConfiguration metadata: creationTimestamp: "2026-07-23T22:17:12Z" generation: 2 labels: app: multus-admission-controller managedFields: - apiVersion: admissionregistration.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:labels: f:app: {} f:ownerReferences: k:{"uid":"535b3638-4238-49eb-8de5-fb18c58e91c8"}: {} f:webhooks: k:{"name":"multus-validating-config.k8s.io"}: .: {} f:admissionReviewVersions: {} f:clientConfig: f:caBundle: {} f:url: {} f:matchConditions: k:{"name":"CreateDeleteOrUpdatedSpec"}: .: {} f:expression: {} f:name: {} k:{"name":"IgnoreDefaultOVNKubernetesNAD"}: .: {} f:expression: {} f:name: {} f:name: {} f:rules: {} f:sideEffects: {} f:timeoutSeconds: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-07-23T22:17:36Z" name: multus.openshift.io ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 535b3638-4238-49eb-8de5-fb18c58e91c8 resourceVersion: "4139" uid: f72a19b4-0d7f-41dc-975e-a3a70a034852 webhooks: - admissionReviewVersions: - v1 clientConfig: caBundle: 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 url: https://multus-admission-controller.clusters-2b4c1b87-f47b-4e92-9a59-7c136c80699f.svc/validate failurePolicy: Fail matchConditions: - expression: oldObject == null || object == null || has(object.spec) != has(oldObject.spec) || (has(object.spec) && object.spec != oldObject.spec) name: CreateDeleteOrUpdatedSpec - expression: object == null || object.metadata.namespace != "openshift-ovn-kubernetes" || object.metadata.name != "default" name: IgnoreDefaultOVNKubernetesNAD matchPolicy: Equivalent name: multus-validating-config.k8s.io namespaceSelector: {} objectSelector: {} rules: - apiGroups: - k8s.cni.cncf.io apiVersions: - v1 operations: - CREATE - UPDATE resources: - network-attachment-definitions scope: '*' sideEffects: NoneOnDryRun timeoutSeconds: 30