--- apiVersion: admissionregistration.k8s.io/v1 kind: ValidatingWebhookConfiguration metadata: creationTimestamp: "2026-09-18T03:02:24Z" generation: 1 labels: app: multus-admission-controller managedFields: - apiVersion: admissionregistration.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:labels: f:app: {} f:ownerReferences: k:{"uid":"bd4dc1ab-78fc-4edf-a68f-50ef459f4eb9"}: {} f:webhooks: k:{"name":"multus-validating-config.k8s.io"}: .: {} f:admissionReviewVersions: {} f:clientConfig: f:caBundle: {} f:url: {} f:matchConditions: k:{"name":"CreateDeleteOrUpdatedSpec"}: .: {} f:expression: {} f:name: {} k:{"name":"IgnoreDefaultOVNKubernetesNAD"}: .: {} f:expression: {} f:name: {} f:name: {} f:rules: {} f:sideEffects: {} f:timeoutSeconds: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-18T03:02:24Z" name: multus.openshift.io ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: bd4dc1ab-78fc-4edf-a68f-50ef459f4eb9 resourceVersion: "2460" uid: f07d3059-7b4e-4d12-ae97-8569a46e3506 webhooks: - admissionReviewVersions: - v1 clientConfig: caBundle: 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 url: https://multus-admission-controller.clusters-7cf3481a-6b8d-4dd7-bbde-c837b99ec29e.svc/validate failurePolicy: Fail matchConditions: - expression: oldObject == null || object == null || has(object.spec) != has(oldObject.spec) || (has(object.spec) && object.spec != oldObject.spec) name: CreateDeleteOrUpdatedSpec - expression: object == null || object.metadata.namespace != "openshift-ovn-kubernetes" || object.metadata.name != "default" name: IgnoreDefaultOVNKubernetesNAD matchPolicy: Equivalent name: multus-validating-config.k8s.io namespaceSelector: {} objectSelector: {} rules: - apiGroups: - k8s.cni.cncf.io apiVersions: - v1 operations: - CREATE - UPDATE resources: - network-attachment-definitions scope: '*' sideEffects: NoneOnDryRun timeoutSeconds: 30