--- apiVersion: admissionregistration.k8s.io/v1 kind: ValidatingWebhookConfiguration metadata: creationTimestamp: "2026-09-10T21:55:44Z" generation: 2 labels: app: multus-admission-controller managedFields: - apiVersion: admissionregistration.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:labels: f:app: {} f:ownerReferences: k:{"uid":"9fdf61aa-0b5f-4f38-b121-dfc451c96eb2"}: {} f:webhooks: k:{"name":"multus-validating-config.k8s.io"}: .: {} f:admissionReviewVersions: {} f:clientConfig: f:caBundle: {} f:url: {} f:matchConditions: k:{"name":"CreateDeleteOrUpdatedSpec"}: .: {} f:expression: {} f:name: {} k:{"name":"IgnoreDefaultOVNKubernetesNAD"}: .: {} f:expression: {} f:name: {} f:name: {} f:rules: {} f:sideEffects: {} f:timeoutSeconds: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-10T21:57:08Z" name: multus.openshift.io ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 9fdf61aa-0b5f-4f38-b121-dfc451c96eb2 resourceVersion: "4823" uid: 28378df9-e5a6-4cb3-aad1-54e06c5fe98a webhooks: - admissionReviewVersions: - v1 clientConfig: caBundle: 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 url: https://multus-admission-controller.clusters-a9e46cb5-58cb-4f7d-8555-dd1350eecf75.svc/validate failurePolicy: Fail matchConditions: - expression: oldObject == null || object == null || has(object.spec) != has(oldObject.spec) || (has(object.spec) && object.spec != oldObject.spec) name: CreateDeleteOrUpdatedSpec - expression: object == null || object.metadata.namespace != "openshift-ovn-kubernetes" || object.metadata.name != "default" name: IgnoreDefaultOVNKubernetesNAD matchPolicy: Equivalent name: multus-validating-config.k8s.io namespaceSelector: {} objectSelector: {} rules: - apiGroups: - k8s.cni.cncf.io apiVersions: - v1 operations: - CREATE - UPDATE resources: - network-attachment-definitions scope: '*' sideEffects: NoneOnDryRun timeoutSeconds: 30