--- apiVersion: admissionregistration.k8s.io/v1 kind: ValidatingWebhookConfiguration metadata: creationTimestamp: "2026-08-04T22:14:51Z" generation: 2 labels: app: multus-admission-controller managedFields: - apiVersion: admissionregistration.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:labels: f:app: {} f:ownerReferences: k:{"uid":"8c341371-a59f-4861-af44-72d77b2ae439"}: {} f:webhooks: k:{"name":"multus-validating-config.k8s.io"}: .: {} f:admissionReviewVersions: {} f:clientConfig: f:caBundle: {} f:url: {} f:matchConditions: k:{"name":"CreateDeleteOrUpdatedSpec"}: .: {} f:expression: {} f:name: {} k:{"name":"IgnoreDefaultOVNKubernetesNAD"}: .: {} f:expression: {} f:name: {} f:name: {} f:rules: {} f:sideEffects: {} f:timeoutSeconds: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-08-04T22:15:17Z" name: multus.openshift.io ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 8c341371-a59f-4861-af44-72d77b2ae439 resourceVersion: "4143" uid: b20a795e-eed5-4569-9b0d-8ab029284332 webhooks: - admissionReviewVersions: - v1 clientConfig: caBundle: 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 url: https://multus-admission-controller.clusters-769659be-5021-4d19-9762-a7d032b12c34.svc/validate failurePolicy: Fail matchConditions: - expression: oldObject == null || object == null || has(object.spec) != has(oldObject.spec) || (has(object.spec) && object.spec != oldObject.spec) name: CreateDeleteOrUpdatedSpec - expression: object == null || object.metadata.namespace != "openshift-ovn-kubernetes" || object.metadata.name != "default" name: IgnoreDefaultOVNKubernetesNAD matchPolicy: Equivalent name: multus-validating-config.k8s.io namespaceSelector: {} objectSelector: {} rules: - apiGroups: - k8s.cni.cncf.io apiVersions: - v1 operations: - CREATE - UPDATE resources: - network-attachment-definitions scope: '*' sideEffects: NoneOnDryRun timeoutSeconds: 30