--- apiVersion: admissionregistration.k8s.io/v1 kind: ValidatingWebhookConfiguration metadata: creationTimestamp: "2026-07-24T06:54:18Z" generation: 2 labels: app: multus-admission-controller managedFields: - apiVersion: admissionregistration.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:labels: f:app: {} f:ownerReferences: k:{"uid":"b3525bf8-af96-4e57-9c0e-46933fe526e2"}: {} f:webhooks: k:{"name":"multus-validating-config.k8s.io"}: .: {} f:admissionReviewVersions: {} f:clientConfig: f:caBundle: {} f:url: {} f:matchConditions: k:{"name":"CreateDeleteOrUpdatedSpec"}: .: {} f:expression: {} f:name: {} k:{"name":"IgnoreDefaultOVNKubernetesNAD"}: .: {} f:expression: {} f:name: {} f:name: {} f:rules: {} f:sideEffects: {} f:timeoutSeconds: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-07-24T06:55:07Z" name: multus.openshift.io ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: b3525bf8-af96-4e57-9c0e-46933fe526e2 resourceVersion: "4526" uid: 48803025-633e-442b-961a-bc51a48fb4c9 webhooks: - admissionReviewVersions: - v1 clientConfig: caBundle: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSURQRENDQWlTZ0F3SUJBZ0lJZkJDU3VlUlBNU1l3RFFZSktvWklodmNOQVFFTEJRQXdKakVTTUJBR0ExVUUKQ3hNSmIzQmxibk5vYVdaME1SQXdEZ1lEVlFRREV3ZHliMjkwTFdOaE1CNFhEVEkyTURjeU5EQTJOVEUxTkZvWApEVE0yTURjeU1UQTJOVEUxTkZvd0pqRVNNQkFHQTFVRUN4TUpiM0JsYm5Ob2FXWjBNUkF3RGdZRFZRUURFd2R5CmIyOTBMV05oTUlJQklqQU5CZ2txaGtpRzl3MEJBUUVGQUFPQ0FROEFNSUlCQ2dLQ0FRRUE3ZEpqbkhUSmVQRjkKeHlSMHozS2J4aDY3dCtjVDFSSk5XV0dRbElJU0dIRzMzSFZ5cENzYWJQVFF4YlAxcGtlb1FDUytVR2RkQkNpMwpYcFQ0YVMxeGQvNEVqRDB1c0I3Nk5xOEFzUDFaKy9KZ0Zma3E2b29IcEdJOHNkZFBoazdJcTJFQUNneDZUOUkwCjZNTTNDNVhwemJoWFczUlVCZUtCWHp4alpzQ0tydFBGT3FVZFZGTnBZd3IvaDZGclNUVDFJZGxjUkNtUjVjZ1QKbFNoZzY3c1NlaGVoeU9Jeld1MjFHNEdwb05VdzNiS3QwckR3MGRZb2ZYN2dsdk5yT1dYRDFPWjM1aFVHWkFjZApPb0ExV2Y0dGl6K0NsWFFDZDBhc1c4V2JLZU5FZ205VUFOSzd5UE9KbVNEc3k2QjllNHBmNHM5YzNVQkxhUVdZCmEvd1ZCRmZVdFFJREFRQUJvMjR3YkRBT0JnTlZIUThCQWY4RUJBTUNBcVF3RHdZRFZSMFRBUUgvQkFVd0F3RUIKL3pCSkJnTlZIUTRFUWdSQVR5eFFUSzFEdHI0YjlrSkozbmV6emVGK0tUZHNFS051NUdkK2ZUS3FaTEs1NklGLwpYcFAyaEtyendLQmtVcGhhcFo3cmN4TUVXaXkrT0t1ZGZaVzJXREFOQmdrcWhraUc5dzBCQVFzRkFBT0NBUUVBCnppZis5WHIwdDlNUDlFQW5qV3NhcG9GeWJTWWpxYi85dzIrem8rK0NVT1V6eGp2Yktrd3BFQUlzWExBUUNLRzYKajIxTURpNFRxbncyRllUV2hZOWI0bmdJck9tTTFkNDN1eUNJemJZRzU1ZzYvVWhZaDhXd3pZdSt1Sm8wV2tYYwpwV3VjbkFQNGFwWFVCOE94TTVHYkx3cXVnMUdkM1JLK1JEdFlCYmhINkdXak1DOGw1eUhJeVpuOTAzWkgrUm9GCm9LZGp6dWh2cGhhb3hEVW5UYldtbWg2cC9SZVVWc1VPaTdyN1NicUdYWkkyYU5leFBUZmJQQ0FpR1o5cEpmcUIKQzJGa0lEQk9aU25WNG9QM1F5SkJ6TXQ4VE45NHZUdUF5bnBMMlB0K2ZtaDQ5bEx4QlQ4QjlNWGIyZHRKUENQTQpYdXZCb2QrWHJ0akk3dUc0U3psR2RBPT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQotLS0tLUJFR0lOIENFUlRJRklDQVRFLS0tLS0KTUlJRUFEQ0NBdWlnQXdJQkFnSUlYTm9oamJjTlJzQXdEUVlKS29aSWh2Y05BUUVMQlFBd0pqRVNNQkFHQTFVRQpDeE1KYjNCbGJuTm9hV1owTVJBd0RnWURWUVFERXdkeWIyOTBMV05oTUI0WERUSTJNRGN5TkRBMk5USXlOVm9YCkRUSTNNRGN5TkRBMk5USXlOVm93TURFU01CQUdBMVVFQ2hNSmIzQmxibk5vYVdaME1Sb3dHQVlEVlFRREV4RnYKY0dWdWMyaHBablF0YVc1bmNtVnpjekNDQVNJd0RRWUpLb1pJaHZjTkFRRUJCUUFEZ2dFUEFEQ0NBUW9DZ2dFQgpBS01rcytOTFNNR0pQNmxPeE5KaVRhWmdaSkZjc0hQbUZvQUhLbmdmUU9SZXE0amxDVzYvVFJwbVpFNjk2MlB0CkpxM3pZNnA1Qi9MdWtReDRiQUtPcHRhL0RiY09tK1JsZmxnNU14UXNXa09zTXRodzNzd0ZaeTJNUjMwQUxlQ3gKUWI4VFRxNjJyVFhpQmJaMEdMbXBwN3lNVmdIOVR5NXMra2dqNmw2RkZRVFpsZFFsOHZ5blFFTmV1Njd3cy9uWQp3WmJxNEx6UVd0NCtiYkg5eUJPMTJvV0RBZ2ZLTFdYOTZxL0dVSXY1SlBSU2xRZEFuMnlVUVp1UEV6YlQ1UG1ICmtHUWJkcEV0bzd1YlBkV2c5ZmJWZDB0RU1Bd1ZLUGtjNG5GaFBwSEhNaGhmaXQ4NXlmSTBxYTQ0alNabUloTFUKTlVzREpZVk8wUDNPa0cxNDBybFEyMXNDQXdFQUFhT0NBU1l3Z2dFaU1BNEdBMVVkRHdFQi93UUVBd0lGb0RBZApCZ05WSFNVRUZqQVVCZ2dyQmdFRkJRY0RBZ1lJS3dZQkJRVUhBd0V3REFZRFZSMFRBUUgvQkFJd0FEQkpCZ05WCkhRNEVRZ1JBR1pIbFBOSU92STJXQzFnMElmM01lMDBlY2lJYjYzVlNRUFZrWmJTTHYwd3ExZENJTzJiN3Q4Z00KM0hUUWQ2SDFOaWFmWUFVcXBJVFVXWnhlMUNyQnp6QkxCZ05WSFNNRVJEQkNnRUJQTEZCTXJVTzJ2aHYyUWtuZQpkN1BONFg0cE4yd1FvMjdrWjM1OU1xcGtzcm5vZ1g5ZWsvYUVxdlBBb0dSU21GcWxudXR6RXdSYUxMNDRxNTE5CmxiWllNRXNHQTFVZEVRUkVNRUtDUUNvdVlYQndjeTVqTlRoaE9XVXhaUzA0TmpnMkxUUXhPVGN0T0dRd05pMWgKWXpOaE9XUXdOV05rTTJJdWNISnZaQzVyYjI1bWJIVjRaV0ZoY3k1amIyMHdEUVlKS29aSWh2Y05BUUVMQlFBRApnZ0VCQUJXNnVvK2VFWWpCdi93TTdHaExIQzI3TFQzOWpHUmx0bDc5dHUwLzVldmo0dG9DWXB5TnUzc0tISHczCmE2TFIySmNxRlNPUlBIcGxEbXdsYWtkUWdGOHhLOFJ5TkJPZVNFNlpuQjA1dm5Hbm1WOGRDSm83a1JxVmZ0Q0oKY005RTVrQUlzY3psZU1YN3VIRytNM2F3Y2RHWVlkVlIvb2lhZVZpNGk4aHNjZUJTTFJIRUFsTTg4b2c2TWlLSAoreFNhcERRanRFdXBkSkcyYmdGc1ZVNlNqUUh6ZTJHT3RCb2ZRUDVpUWo3ZUxkUFk3U1hmc1ladi92ZEt5TEwvCmlIT3lkemVnTklCN0xlZklCODlVL09WYXNwU0dzWWI4SCtsRWlNZGYxK2I3ekRBTDZFblJLRjJHU2RnZzZrbFkKVy9tTWFBLzhpa3pIWUpaby93VWc2MG1ndy9vPQotLS0tLUVORCBDRVJUSUZJQ0FURS0tLS0tCg== url: https://multus-admission-controller.clusters-c58a9e1e-8686-4197-8d06-ac3a9d05cd3b.svc/validate failurePolicy: Fail matchConditions: - expression: oldObject == null || object == null || has(object.spec) != has(oldObject.spec) || (has(object.spec) && object.spec != oldObject.spec) name: CreateDeleteOrUpdatedSpec - expression: object == null || object.metadata.namespace != "openshift-ovn-kubernetes" || object.metadata.name != "default" name: IgnoreDefaultOVNKubernetesNAD matchPolicy: Equivalent name: multus-validating-config.k8s.io namespaceSelector: {} objectSelector: {} rules: - apiGroups: - k8s.cni.cncf.io apiVersions: - v1 operations: - CREATE - UPDATE resources: - network-attachment-definitions scope: '*' sideEffects: NoneOnDryRun timeoutSeconds: 30