--- apiVersion: admissionregistration.k8s.io/v1 kind: ValidatingWebhookConfiguration metadata: creationTimestamp: "2026-09-07T13:34:49Z" generation: 1 labels: app: multus-admission-controller managedFields: - apiVersion: admissionregistration.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:labels: f:app: {} f:ownerReferences: k:{"uid":"2ee3ec30-7e1a-44b8-a67f-64a7c6d1522d"}: {} f:webhooks: k:{"name":"multus-validating-config.k8s.io"}: .: {} f:admissionReviewVersions: {} f:clientConfig: f:caBundle: {} f:url: {} f:matchConditions: k:{"name":"CreateDeleteOrUpdatedSpec"}: .: {} f:expression: {} f:name: {} k:{"name":"IgnoreDefaultOVNKubernetesNAD"}: .: {} f:expression: {} f:name: {} f:name: {} f:rules: {} f:sideEffects: {} f:timeoutSeconds: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-07T13:34:49Z" name: multus.openshift.io ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 2ee3ec30-7e1a-44b8-a67f-64a7c6d1522d resourceVersion: "4033" uid: af1debaa-3cad-4041-b756-72e435096fb7 webhooks: - admissionReviewVersions: - v1 clientConfig: caBundle: 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 url: https://multus-admission-controller.clusters-3129a9b4-292a-4233-90b6-3b6a6d2394bf.svc/validate failurePolicy: Fail matchConditions: - expression: oldObject == null || object == null || has(object.spec) != has(oldObject.spec) || (has(object.spec) && object.spec != oldObject.spec) name: CreateDeleteOrUpdatedSpec - expression: object == null || object.metadata.namespace != "openshift-ovn-kubernetes" || object.metadata.name != "default" name: IgnoreDefaultOVNKubernetesNAD matchPolicy: Equivalent name: multus-validating-config.k8s.io namespaceSelector: {} objectSelector: {} rules: - apiGroups: - k8s.cni.cncf.io apiVersions: - v1 operations: - CREATE - UPDATE resources: - network-attachment-definitions scope: '*' sideEffects: NoneOnDryRun timeoutSeconds: 30