--- apiVersion: admissionregistration.k8s.io/v1 kind: ValidatingWebhookConfiguration metadata: creationTimestamp: "2026-09-15T21:10:15Z" generation: 2 labels: app: multus-admission-controller managedFields: - apiVersion: admissionregistration.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:labels: f:app: {} f:ownerReferences: k:{"uid":"bfd41c12-3bef-4a3b-a037-5d32630bd866"}: {} f:webhooks: k:{"name":"multus-validating-config.k8s.io"}: .: {} f:admissionReviewVersions: {} f:clientConfig: f:caBundle: {} f:url: {} f:matchConditions: k:{"name":"CreateDeleteOrUpdatedSpec"}: .: {} f:expression: {} f:name: {} k:{"name":"IgnoreDefaultOVNKubernetesNAD"}: .: {} f:expression: {} f:name: {} f:name: {} f:rules: {} f:sideEffects: {} f:timeoutSeconds: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-15T21:11:03Z" name: multus.openshift.io ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: bfd41c12-3bef-4a3b-a037-5d32630bd866 resourceVersion: "4078" uid: fa615662-ba61-4ee1-b30c-e5e9b20cd5f1 webhooks: - admissionReviewVersions: - v1 clientConfig: caBundle: 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 url: https://multus-admission-controller.clusters-589dcafc-a237-4178-8677-e9491ed62b25.svc/validate failurePolicy: Fail matchConditions: - expression: oldObject == null || object == null || has(object.spec) != has(oldObject.spec) || (has(object.spec) && object.spec != oldObject.spec) name: CreateDeleteOrUpdatedSpec - expression: object == null || object.metadata.namespace != "openshift-ovn-kubernetes" || object.metadata.name != "default" name: IgnoreDefaultOVNKubernetesNAD matchPolicy: Equivalent name: multus-validating-config.k8s.io namespaceSelector: {} objectSelector: {} rules: - apiGroups: - k8s.cni.cncf.io apiVersions: - v1 operations: - CREATE - UPDATE resources: - network-attachment-definitions scope: '*' sideEffects: NoneOnDryRun timeoutSeconds: 30