--- apiVersion: admissionregistration.k8s.io/v1 kind: ValidatingWebhookConfiguration metadata: creationTimestamp: "2026-09-07T12:30:06Z" generation: 2 labels: app: multus-admission-controller managedFields: - apiVersion: admissionregistration.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:labels: f:app: {} f:ownerReferences: k:{"uid":"69d62058-051c-497f-8e05-64f9e5be2971"}: {} f:webhooks: k:{"name":"multus-validating-config.k8s.io"}: .: {} f:admissionReviewVersions: {} f:clientConfig: f:caBundle: {} f:url: {} f:matchConditions: k:{"name":"CreateDeleteOrUpdatedSpec"}: .: {} f:expression: {} f:name: {} k:{"name":"IgnoreDefaultOVNKubernetesNAD"}: .: {} f:expression: {} f:name: {} f:name: {} f:rules: {} f:sideEffects: {} f:timeoutSeconds: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-07T12:30:29Z" name: multus.openshift.io ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 69d62058-051c-497f-8e05-64f9e5be2971 resourceVersion: "4230" uid: bbdc9b33-dc73-4aa3-9d0e-90c0d4e21245 webhooks: - admissionReviewVersions: - v1 clientConfig: caBundle: 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 url: https://multus-admission-controller.clusters-2ee3bff6-b4ab-4a64-a851-62ad11f93853.svc/validate failurePolicy: Fail matchConditions: - expression: oldObject == null || object == null || has(object.spec) != has(oldObject.spec) || (has(object.spec) && object.spec != oldObject.spec) name: CreateDeleteOrUpdatedSpec - expression: object == null || object.metadata.namespace != "openshift-ovn-kubernetes" || object.metadata.name != "default" name: IgnoreDefaultOVNKubernetesNAD matchPolicy: Equivalent name: multus-validating-config.k8s.io namespaceSelector: {} objectSelector: {} rules: - apiGroups: - k8s.cni.cncf.io apiVersions: - v1 operations: - CREATE - UPDATE resources: - network-attachment-definitions scope: '*' sideEffects: NoneOnDryRun timeoutSeconds: 30