--- apiVersion: admissionregistration.k8s.io/v1 kind: ValidatingWebhookConfiguration metadata: creationTimestamp: "2026-07-20T19:09:20Z" generation: 2 labels: app: multus-admission-controller managedFields: - apiVersion: admissionregistration.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:labels: f:app: {} f:ownerReferences: k:{"uid":"0d7e980b-899b-4528-acf3-475238679e53"}: {} f:webhooks: k:{"name":"multus-validating-config.k8s.io"}: .: {} f:admissionReviewVersions: {} f:clientConfig: f:caBundle: {} f:url: {} f:matchConditions: k:{"name":"CreateDeleteOrUpdatedSpec"}: .: {} f:expression: {} f:name: {} k:{"name":"IgnoreDefaultOVNKubernetesNAD"}: .: {} f:expression: {} f:name: {} f:name: {} f:rules: {} f:sideEffects: {} f:timeoutSeconds: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-07-20T19:09:44Z" name: multus.openshift.io ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 0d7e980b-899b-4528-acf3-475238679e53 resourceVersion: "4235" uid: 84f53a5e-cd9b-4c9c-92f3-4050c8818d9c webhooks: - admissionReviewVersions: - v1 clientConfig: caBundle: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSURQRENDQWlTZ0F3SUJBZ0lJSGJ1c01TVW00NWd3RFFZSktvWklodmNOQVFFTEJRQXdKakVTTUJBR0ExVUUKQ3hNSmIzQmxibk5vYVdaME1SQXdEZ1lEVlFRREV3ZHliMjkwTFdOaE1CNFhEVEkyTURjeU1ERTVNRFkwTlZvWApEVE0yTURjeE56RTVNRFkwTlZvd0pqRVNNQkFHQTFVRUN4TUpiM0JsYm5Ob2FXWjBNUkF3RGdZRFZRUURFd2R5CmIyOTBMV05oTUlJQklqQU5CZ2txaGtpRzl3MEJBUUVGQUFPQ0FROEFNSUlCQ2dLQ0FRRUE0ciswOEc4Q3I4MnMKakt5MS9oTkoxZUVRS3p0elNPU1prUGd6UC9WYnNKZ285RkI2Vjk1dUErUWZlZDBROEVScU9kTFZSeGtQclBrSwp5RmxVTVV3R2dNdVFzY3lrNmpqbHVvMm1MazB5RngyRVpHZG9wYkp0Y21CdmxWajB6MTNTemxBYjIrTFNodkowCmNhVEZCWVFzRG5VazlyK1V5eW55YkltQ1dWTDdFb0dWQW9XdWpwYVpmeEhpZmorTUVBdWQ1R1hLMmJLeHJzbkcKNG0wc1NxWjFaRk5jNW1xTm9EWk9rYVNHZElwZDYyMzZ3QVRpNkI3c0lvdTNIS1haazJkYU9XWkRDcGZGdlFEcApnVHh3am5Fc1A1VTByOWhnaFp5a1cxVUs3cmNxaTdEMmJhL0xSbktXZmtRMUNscXNnZkxBRlZkcGpMcEQrRm5mCjBsRU9TR0F3SVFJREFRQUJvMjR3YkRBT0JnTlZIUThCQWY4RUJBTUNBcVF3RHdZRFZSMFRBUUgvQkFVd0F3RUIKL3pCSkJnTlZIUTRFUWdSQUV3Z1ZmK3ArMVZBS3pNZDF5ZEJFNEpLY2dKUElmdmRTOTRQVzM2NmpydW42Z2pSbQpyc1IwMkExR011TkJ4MjREOUlPK0UzbVNCMXV3bUovSFVjK1NKekFOQmdrcWhraUc5dzBCQVFzRkFBT0NBUUVBCmIvdmVJUVpjUVplb2RrVlZSNnRoN0JjL0FuUVM5NmU5VEFQS2xqNWhSSzhySU40OTYwek5jcVBGRlgrc0hzSzQKYVJKL3c1enhrbFhkcUN6MUc2YlRoSUtydUZsMWo5aGVUMmgvNEptWEhhZVVvendOZThFMWNVZEdTVEdTOHpKQwpKT0pTd3NxbkR6b3A0elFwSW4wWVZJZHlSczBRRkt6d3pRTkZ2K3I4SGRWQ3JwU0NGeURaelp2UFN3ZCtOc1ZWCklMeW5jOGpDTFJqRmtZcEZZTmZKcktORC9JZmtvQnlWcVM2c1FEb3Jycm4xL2JaajVqNHdoWGkwS3FWTVllZ2cKbm5hNWFGT2dWR3pYRDVSVzQzajd3b00xblZkUWZydW9PZVNGUjdjQzA0OG9UQ0lnZVNkakdDbldjSzFHQU5LOAovcTJLV08vWWY0L3FNRnJJTlZHTFF3PT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQotLS0tLUJFR0lOIENFUlRJRklDQVRFLS0tLS0KTUlJRUFEQ0NBdWlnQXdJQkFnSUlXUStvNVJ0aWdVQXdEUVlKS29aSWh2Y05BUUVMQlFBd0pqRVNNQkFHQTFVRQpDeE1KYjNCbGJuTm9hV1owTVJBd0RnWURWUVFERXdkeWIyOTBMV05oTUI0WERUSTJNRGN5TURFNU1EY3hOVm9YCkRUSTNNRGN5TURFNU1EY3hOVm93TURFU01CQUdBMVVFQ2hNSmIzQmxibk5vYVdaME1Sb3dHQVlEVlFRREV4RnYKY0dWdWMyaHBablF0YVc1bmNtVnpjekNDQVNJd0RRWUpLb1pJaHZjTkFRRUJCUUFEZ2dFUEFEQ0NBUW9DZ2dFQgpBTk1ORHNRa3lQbU1Xd1FGeUxyeTl3UWR0cWFMNW5QbXBNUjgzM2Z1Q3pBR1dFUUVCNHA4ZTBpV0RONVYrQllvCjdHSkxWK3F4UFA5Vzk5bWRGZEx5b3JtL1ZoODBNRm1pbzlYUlpPS0pIbHIrb0FMVTBBV3ZrRHROdm5YRlFwSUkKS0hIb3RoTDJwajhMQ1Uxb2RRSFBta1NWMXBNNWhReEJHSldyRS9iN1FWeE43VWRrcmhSZjdYcm5tRjB3cVh3Ygp6b3ovbnFWM3lmSGZVaWZMVVVnU0VJdnZVWGZaRnF5Z2tkcVZYMFdqY0VyQkxRcTB3YjJraHlvRkpFRzdDbmdtCk5EMHdQN2lLaGpldU9oOGhQTmVSMEtzY3hDVElocHNGNkg4QVpZekFzRVZTUWlESWZ0MEtNU0hJRjlpZ0tlQVMKY0lIUE8yZ0ZwVFpqQktOeVNEZ3ZRNzhDQXdFQUFhT0NBU1l3Z2dFaU1BNEdBMVVkRHdFQi93UUVBd0lGb0RBZApCZ05WSFNVRUZqQVVCZ2dyQmdFRkJRY0RBZ1lJS3dZQkJRVUhBd0V3REFZRFZSMFRBUUgvQkFJd0FEQkpCZ05WCkhRNEVRZ1JBOGx3NTVtcHZTZFJWNDFyQXdoK3U2dlFBSHdVR2MyLzZlT0k2RDRXNFd2cytzRS9DRzg5eVhkTUsKRUpaNGdMbmtOUnpnZ1U1ZjNLTWdTd2JQdU5jM1JqQkxCZ05WSFNNRVJEQkNnRUFUQ0JWLzZuN1ZVQXJNeDNYSgowRVRna3B5QWs4aCs5MUwzZzliZnJxT3U2ZnFDTkdhdXhIVFlEVVl5NDBISGJnUDBnNzRUZVpJSFc3Q1luOGRSCno1SW5NRXNHQTFVZEVRUkVNRUtDUUNvdVlYQndjeTQwTURnME9EZ3lZeTA0TUROaExUUmxaR1F0T1RjeFpTMDIKWldWaVlqQXlNREUwWWpFdWNISnZaQzVyYjI1bWJIVjRaV0ZoY3k1amIyMHdEUVlKS29aSWh2Y05BUUVMQlFBRApnZ0VCQUx5VVZDZTMzUUdJT1FIU1YyUmJUQ0dmQzlyMXd3ZmtZblRWRnAxYjdkYjlVUmhRWEJuKytDUkpZbUlKCjRhaVhPTWdYSEp5b0dkWGRHRnRER3ZOemJsc0dyTTlnTERHQjcrV1AvMTEwdDlKenBTcjcyQ3BRcS8xQjFmcWUKRk5JT0JCN0h2dFFLYlpidmg1NU5uRXlQQzVJTG5uT1B0cUVSU0lxVDJkQVpHL1FXZzNVSElmdU1NRHVLYm9RSAozVzgzYVc1M01RUHFEUEo4bktUNU1mdG9QeW5Ea3JGdy9wSW04dFZRWmRaT2RVK1JRU3ByVVhZZ0RPd1NPU081Ck1xaVdSZ3RBWmJ0dXhhU0M3MHhUMUlKdWxpSndUMUc0TUlXTCtNcFVpSVF0VWNtRFhhc0VGMTc1TXVWUlZDMGkKZVZVeFJxTnFEYTNsQ20xTUdtbVAxY2pQQTdBPQotLS0tLUVORCBDRVJUSUZJQ0FURS0tLS0tCg== url: https://multus-admission-controller.clusters-4084882c-803a-4edd-971e-6eebb02014b1.svc/validate failurePolicy: Fail matchConditions: - expression: oldObject == null || object == null || has(object.spec) != has(oldObject.spec) || (has(object.spec) && object.spec != oldObject.spec) name: CreateDeleteOrUpdatedSpec - expression: object == null || object.metadata.namespace != "openshift-ovn-kubernetes" || object.metadata.name != "default" name: IgnoreDefaultOVNKubernetesNAD matchPolicy: Equivalent name: multus-validating-config.k8s.io namespaceSelector: {} objectSelector: {} rules: - apiGroups: - k8s.cni.cncf.io apiVersions: - v1 operations: - CREATE - UPDATE resources: - network-attachment-definitions scope: '*' sideEffects: NoneOnDryRun timeoutSeconds: 30