--- apiVersion: admissionregistration.k8s.io/v1 kind: ValidatingWebhookConfiguration metadata: creationTimestamp: "2026-09-10T20:53:14Z" generation: 2 labels: app: multus-admission-controller managedFields: - apiVersion: admissionregistration.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:labels: f:app: {} f:ownerReferences: k:{"uid":"596e420c-9bed-4ee8-a50d-f2d4d65d0e05"}: {} f:webhooks: k:{"name":"multus-validating-config.k8s.io"}: .: {} f:admissionReviewVersions: {} f:clientConfig: f:caBundle: {} f:url: {} f:matchConditions: k:{"name":"CreateDeleteOrUpdatedSpec"}: .: {} f:expression: {} f:name: {} k:{"name":"IgnoreDefaultOVNKubernetesNAD"}: .: {} f:expression: {} f:name: {} f:name: {} f:rules: {} f:sideEffects: {} f:timeoutSeconds: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-10T20:54:11Z" name: multus.openshift.io ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 596e420c-9bed-4ee8-a50d-f2d4d65d0e05 resourceVersion: "4495" uid: cba88a6c-6a9e-4da4-9c8f-d411b3de2eb6 webhooks: - admissionReviewVersions: - v1 clientConfig: caBundle: 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 url: https://multus-admission-controller.clusters-b5ca3ba1-4792-45a1-a85a-2813ac07cd20.svc/validate failurePolicy: Fail matchConditions: - expression: oldObject == null || object == null || has(object.spec) != has(oldObject.spec) || (has(object.spec) && object.spec != oldObject.spec) name: CreateDeleteOrUpdatedSpec - expression: object == null || object.metadata.namespace != "openshift-ovn-kubernetes" || object.metadata.name != "default" name: IgnoreDefaultOVNKubernetesNAD matchPolicy: Equivalent name: multus-validating-config.k8s.io namespaceSelector: {} objectSelector: {} rules: - apiGroups: - k8s.cni.cncf.io apiVersions: - v1 operations: - CREATE - UPDATE resources: - network-attachment-definitions scope: '*' sideEffects: NoneOnDryRun timeoutSeconds: 30