--- apiVersion: admissionregistration.k8s.io/v1 kind: ValidatingWebhookConfiguration metadata: creationTimestamp: "2026-07-20T12:54:36Z" generation: 2 labels: app: multus-admission-controller managedFields: - apiVersion: admissionregistration.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:labels: f:app: {} f:ownerReferences: k:{"uid":"0cf5b4d5-1bc9-4345-9c60-c33c63db1fb1"}: {} f:webhooks: k:{"name":"multus-validating-config.k8s.io"}: .: {} f:admissionReviewVersions: {} f:clientConfig: f:caBundle: {} f:url: {} f:matchConditions: k:{"name":"CreateDeleteOrUpdatedSpec"}: .: {} f:expression: {} f:name: {} k:{"name":"IgnoreDefaultOVNKubernetesNAD"}: .: {} f:expression: {} f:name: {} f:name: {} f:rules: {} f:sideEffects: {} f:timeoutSeconds: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-07-20T12:55:07Z" name: multus.openshift.io ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 0cf5b4d5-1bc9-4345-9c60-c33c63db1fb1 resourceVersion: "4353" uid: bec362e7-b8e2-47a4-95fb-43ff7654282f webhooks: - admissionReviewVersions: - v1 clientConfig: caBundle: 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 url: https://multus-admission-controller.clusters-2c495a6d-1154-46cb-a2f2-9f770b2fca06.svc/validate failurePolicy: Fail matchConditions: - expression: oldObject == null || object == null || has(object.spec) != has(oldObject.spec) || (has(object.spec) && object.spec != oldObject.spec) name: CreateDeleteOrUpdatedSpec - expression: object == null || object.metadata.namespace != "openshift-ovn-kubernetes" || object.metadata.name != "default" name: IgnoreDefaultOVNKubernetesNAD matchPolicy: Equivalent name: multus-validating-config.k8s.io namespaceSelector: {} objectSelector: {} rules: - apiGroups: - k8s.cni.cncf.io apiVersions: - v1 operations: - CREATE - UPDATE resources: - network-attachment-definitions scope: '*' sideEffects: NoneOnDryRun timeoutSeconds: 30