--- apiVersion: admissionregistration.k8s.io/v1 kind: ValidatingWebhookConfiguration metadata: creationTimestamp: "2026-09-11T14:10:20Z" generation: 1 labels: app: multus-admission-controller managedFields: - apiVersion: admissionregistration.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:labels: f:app: {} f:ownerReferences: k:{"uid":"a733874f-e312-439e-a8ff-2161878902a2"}: {} f:webhooks: k:{"name":"multus-validating-config.k8s.io"}: .: {} f:admissionReviewVersions: {} f:clientConfig: f:caBundle: {} f:url: {} f:matchConditions: k:{"name":"CreateDeleteOrUpdatedSpec"}: .: {} f:expression: {} f:name: {} k:{"name":"IgnoreDefaultOVNKubernetesNAD"}: .: {} f:expression: {} f:name: {} f:name: {} f:rules: {} f:sideEffects: {} f:timeoutSeconds: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-11T14:10:20Z" name: multus.openshift.io ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: a733874f-e312-439e-a8ff-2161878902a2 resourceVersion: "2565" uid: cfb96023-b250-4c62-9b35-887964e80ffe webhooks: - admissionReviewVersions: - v1 clientConfig: caBundle: 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 url: https://multus-admission-controller.clusters-89646fff-1f94-465b-8b9c-dfa3b2c189ad.svc/validate failurePolicy: Fail matchConditions: - expression: oldObject == null || object == null || has(object.spec) != has(oldObject.spec) || (has(object.spec) && object.spec != oldObject.spec) name: CreateDeleteOrUpdatedSpec - expression: object == null || object.metadata.namespace != "openshift-ovn-kubernetes" || object.metadata.name != "default" name: IgnoreDefaultOVNKubernetesNAD matchPolicy: Equivalent name: multus-validating-config.k8s.io namespaceSelector: {} objectSelector: {} rules: - apiGroups: - k8s.cni.cncf.io apiVersions: - v1 operations: - CREATE - UPDATE resources: - network-attachment-definitions scope: '*' sideEffects: NoneOnDryRun timeoutSeconds: 30