--- apiVersion: admissionregistration.k8s.io/v1 kind: ValidatingWebhookConfiguration metadata: creationTimestamp: "2026-11-03T08:33:00Z" generation: 2 labels: app: multus-admission-controller managedFields: - apiVersion: admissionregistration.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:labels: f:app: {} f:ownerReferences: k:{"uid":"5fd813dc-1e04-4f17-921a-1dd57c8766f6"}: {} f:webhooks: k:{"name":"multus-validating-config.k8s.io"}: .: {} f:admissionReviewVersions: {} f:clientConfig: f:caBundle: {} f:url: {} f:matchConditions: k:{"name":"CreateDeleteOrUpdatedSpec"}: .: {} f:expression: {} f:name: {} k:{"name":"IgnoreDefaultOVNKubernetesNAD"}: .: {} f:expression: {} f:name: {} f:name: {} f:rules: {} f:sideEffects: {} f:timeoutSeconds: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-11-03T08:33:55Z" name: multus.openshift.io ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 5fd813dc-1e04-4f17-921a-1dd57c8766f6 resourceVersion: "4390" uid: 5a9bd5bb-0dcc-4db5-80fa-d1095c86c774 webhooks: - admissionReviewVersions: - v1 clientConfig: caBundle: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSURQRENDQWlTZ0F3SUJBZ0lJU1p5TFdjTFlMMGd3RFFZSktvWklodmNOQVFFTEJRQXdKakVTTUJBR0ExVUUKQ3hNSmIzQmxibk5vYVdaME1SQXdEZ1lEVlFRREV3ZHliMjkwTFdOaE1CNFhEVEkyTVRFd016QTRNekF5TmxvWApEVE0yTVRBek1UQTRNekF5Tmxvd0pqRVNNQkFHQTFVRUN4TUpiM0JsYm5Ob2FXWjBNUkF3RGdZRFZRUURFd2R5CmIyOTBMV05oTUlJQklqQU5CZ2txaGtpRzl3MEJBUUVGQUFPQ0FROEFNSUlCQ2dLQ0FRRUFtZnRKS3dJK0dyNjYKSFQvcnhTdDBYdmRuMGhRYzZra01Ka2U0ZnhIRUQ3dGljTDVBYlc3SFp5dzcrbXZHNFlrUWlrUjhwZGhHbjdGdAovaC9tSU9FcENDa3VPd0JsTUlPeG1sZVFUS0VoWnFUZnpXZFdzL3p6Z20rbWdaZVhBemoxb1Z3cGZXOXVjalJUClJEcjhUbFlSM3pudHFnS2w0WTRGbUhWNFo4bGxWNFR1WUk3VW5wdGluL05XTFJBbEJVTHpBUjRCSkJsYWpveEwKZC8vdjcrUlRGbVRUN204UXBVUktiYVcyTE5nSUJrS05hV005MUYwVlVtckRySEtxMTFJNEN3TCtZSGR1ZzFmdQphNENXbnF3Y2FDODJZVVQxTldUL2RJcTR5YTQxRE1uYnprOFV0UnZURk9JeTBKdTZVTHA5ZnRnUzJtVVQrSDNBCkxrQlFjcC9WOFFJREFRQUJvMjR3YkRBT0JnTlZIUThCQWY4RUJBTUNBcVF3RHdZRFZSMFRBUUgvQkFVd0F3RUIKL3pCSkJnTlZIUTRFUWdSQWJoeTVTUUFCajd1clBlRmpINXpYQ3YzcXRXMlEvTUxNazNGdDhHc2RqRE0wTlBKdQpidStlMlNzSEtpb1ZFaEo2N2FTRGNGR005RmVjaklpRktqUkFHVEFOQmdrcWhraUc5dzBCQVFzRkFBT0NBUUVBCkxVTmtXTTh4cnR3ZjNOZGE0YndEWWJIOTlZanNQQnA1L3UzN1lpSHlqSjFWNVlYdjRkSnllVFg3YjA2NjVGN1oKLytwNG5zTFdmWGtaU0l3RzA3Y3k2S3U2ZmpSYkFsUk82OEhwZWlQTCtvY2ZGWEJ6eU1GWFVpUE5TVmMrV1dsMQpCVkl5K0thMlN3RE9kYU8yeUJHRUErRnczRml0S3UwY0Zjc3VUYVlxc1psNGkyREF0T0thclExUE9Sa3NUOGxYCkpEN0ZNVUlYcnNaOE05NE1OcS9XbWhaazFuWHJ1b2hYR3dacXF0ZTBMSm1RY2dNa1Yyc0NOeEV4YTVySnViQ2MKNkJjcGZ2QW8zak1Kb1JXQ2xOV2VraVlkN2ZiVkhEWGVFaTM0TVVrZUUrLzRrWGd6dW42SnZhcDRDMUZEQTJ5aQpYVmxxb2lPVkg0Q0h5cStrZ0JDU2ZnPT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQotLS0tLUJFR0lOIENFUlRJRklDQVRFLS0tLS0KTUlJRDh6Q0NBdHVnQXdJQkFnSUlLL2E0VXpPUWZ1TXdEUVlKS29aSWh2Y05BUUVMQlFBd0pqRVNNQkFHQTFVRQpDeE1KYjNCbGJuTm9hV1owTVJBd0RnWURWUVFERXdkeWIyOTBMV05oTUI0WERUSTJNVEV3TXpBNE16QXpNbG9YCkRUSTNNVEV3TXpBNE16QXpNbG93TURFU01CQUdBMVVFQ2hNSmIzQmxibk5vYVdaME1Sb3dHQVlEVlFRREV4RnYKY0dWdWMyaHBablF0YVc1bmNtVnpjekNDQVNJd0RRWUpLb1pJaHZjTkFRRUJCUUFEZ2dFUEFEQ0NBUW9DZ2dFQgpBS0hCWGhBc0FHUVo4QU9ldCtxUzk2QmNYZmxRbnU0eVd1UXhsQVpvdlNZTHZ0OG5BNGpSK05DTGI4dkljMi9SCjBVSTBtZ1cxMXZVQlNnaHo2MUM4TEdVbnFISFFsNTh5eHRtajZUUmJydDdkWEsrVFg5UlJYYW5LSnFMb3ZMZzkKMld1VnJYdnlwNGkyQXJkRTMvYW5jRFVNT2ptZEJKVjBNY2ErRklRVHNnVzFiaEIwc0tSRU5OaUJ6RTlpVnNrbQpVbmlrNDBOVHlZYmNkb1JDZHR2b3VIOUMxVDRLTGp4TXlRWVlweFNvaG1pUFc4dkFtSXp2cnlWS1dKNkRoSXFjCjZKUFpHU2FJZnNVVXl2VTZ6dnU4K1M2UFZ4aWZFRnNESy9uMnJEWUtDb0J1MVhYcW5WNFlvZTU5K1lHcDhGK2sKbTVhTnYvaENSMXk4aHJ4aGtzT3lMV2NDQXdFQUFhT0NBUmt3Z2dFVk1BNEdBMVVkRHdFQi93UUVBd0lGb0RBZApCZ05WSFNVRUZqQVVCZ2dyQmdFRkJRY0RBZ1lJS3dZQkJRVUhBd0V3REFZRFZSMFRBUUgvQkFJd0FEQkpCZ05WCkhRNEVRZ1JBOTY2dVM0bktSd09vbThxbXlNTGhMNXRjUTg4Y01iL3lwTE85bUM2R0ttWURRUm1tL3Z3c0dEZmoKTW4zdlNKbkx1NkRramFVNVZiOFZqOFJPS0FzRGFqQkxCZ05WSFNNRVJEQkNnRUJ1SExsSkFBR1B1NnM5NFdNZgpuTmNLL2VxMWJaRDh3c3lUY1czd2F4Mk1NelEwOG01dTc1N1pLd2NxS2hVU0VucnRwSU53VVl6MFY1eU1pSVVxCk5FQVpNRDRHQTFVZEVRUTNNRFdDTXlvdVlYQndjeTVrWmpNNFpqRXdOVE01Tnpjek5ERTJOamRoTXk1d2NtOWsKTG10dmJtWnNkWGd0YjJOd0xXTnBMbVJsZGpBTkJna3Foa2lHOXcwQkFRc0ZBQU9DQVFFQUtkc3RBRDlrcEdNeQpQbXZHdVRKSTZxUWdFV3NnU0l6cGZySi9aYlFNaVp5MmdUVUZUWElaaXEzTHdPUjVOUnQyajluT3l3eG8vRHFGCkdZT0JndGhjOTU0Q0dzcVd1UlRTSWhVMWFiRFRvaTlNRVdEcXM4OGhkNmltVGhaZUM2UDBITGluckxJSzlVRzEKNlg4Q2xsdVFOaEs0M0pjelE4eUYyV3BjdTBrRStRUzVLZmMvV1ZLUVhIQW53QXQvOWY1dHZQOFgxcjhMVWVuKwp2SmYzenNkRXlZTG9JZ1gvZlRiT3JMcFJtYmR6YWJhdmxmZ1FyTmczdHBSbjFzWnFkL29IeFV0N2d5V1NBVittCkdTaHF2NWRZTjBydFNyK2RLODAzYkdmOXhoMUxNeHUrOUFHY3JoQ3RUV050a3ZlSFVjVjY5R3FUdmhxZEltVTUKenRRSnlSNlpSUT09Ci0tLS0tRU5EIENFUlRJRklDQVRFLS0tLS0K url: https://multus-admission-controller.clusters-df38f1053977341667a3.svc/validate failurePolicy: Fail matchConditions: - expression: oldObject == null || object == null || has(object.spec) != has(oldObject.spec) || (has(object.spec) && object.spec != oldObject.spec) name: CreateDeleteOrUpdatedSpec - expression: object == null || object.metadata.namespace != "openshift-ovn-kubernetes" || object.metadata.name != "default" name: IgnoreDefaultOVNKubernetesNAD matchPolicy: Equivalent name: multus-validating-config.k8s.io namespaceSelector: {} objectSelector: {} rules: - apiGroups: - k8s.cni.cncf.io apiVersions: - v1 operations: - CREATE - UPDATE resources: - network-attachment-definitions scope: '*' sideEffects: NoneOnDryRun timeoutSeconds: 30