--- apiVersion: admissionregistration.k8s.io/v1 kind: ValidatingWebhookConfiguration metadata: creationTimestamp: "2026-07-09T15:25:24Z" generation: 2 labels: app: multus-admission-controller managedFields: - apiVersion: admissionregistration.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:labels: f:app: {} f:ownerReferences: k:{"uid":"36ebab62-4fb8-4fa1-8e81-03ef368bf0d5"}: {} f:webhooks: k:{"name":"multus-validating-config.k8s.io"}: .: {} f:admissionReviewVersions: {} f:clientConfig: f:caBundle: {} f:url: {} f:matchConditions: k:{"name":"CreateDeleteOrUpdatedSpec"}: .: {} f:expression: {} f:name: {} k:{"name":"IgnoreDefaultOVNKubernetesNAD"}: .: {} f:expression: {} f:name: {} f:name: {} f:rules: {} f:sideEffects: {} f:timeoutSeconds: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-07-09T15:26:01Z" name: multus.openshift.io ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 36ebab62-4fb8-4fa1-8e81-03ef368bf0d5 resourceVersion: "4290" uid: ae38cd5f-1060-4ad7-a1dd-f2aee8155768 webhooks: - admissionReviewVersions: - v1 clientConfig: caBundle: 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 url: https://multus-admission-controller.clusters-6e9d2785-b8dd-4110-8dd6-5fe2cb668fe4.svc/validate failurePolicy: Fail matchConditions: - expression: oldObject == null || object == null || has(object.spec) != has(oldObject.spec) || (has(object.spec) && object.spec != oldObject.spec) name: CreateDeleteOrUpdatedSpec - expression: object == null || object.metadata.namespace != "openshift-ovn-kubernetes" || object.metadata.name != "default" name: IgnoreDefaultOVNKubernetesNAD matchPolicy: Equivalent name: multus-validating-config.k8s.io namespaceSelector: {} objectSelector: {} rules: - apiGroups: - k8s.cni.cncf.io apiVersions: - v1 operations: - CREATE - UPDATE resources: - network-attachment-definitions scope: '*' sideEffects: NoneOnDryRun timeoutSeconds: 30