apiVersion: admissionregistration.k8s.io/v1
kind: ValidatingWebhookConfiguration
metadata:
  annotations:
  creationTimestamp: "2025-10-27T11:29:52Z"
  generation: 2
  labels:
    app: multus-admission-controller
  name: multus.openshift.io
  ownerReferences:
  - apiVersion: operator.openshift.io/v1
    blockOwnerDeletion: true
    controller: true
    kind: Network
    name: cluster
    uid: 42934d21-bf48-4e6e-be5b-f538b0be0793
  resourceVersion: "6605"
  uid: d78a2410-e097-4497-ba50-fb5908cbad81
webhooks:
- admissionReviewVersions:
  - v1
  clientConfig:
    service:
      name: multus-admission-controller
      namespace: openshift-multus
      path: /validate
      port: 443
  failurePolicy: Fail
  matchConditions:
  - expression: oldObject == null || object == null || has(object.spec) != has(oldObject.spec)
      || (has(object.spec) && object.spec != oldObject.spec)
    name: CreateDeleteOrUpdatedSpec
  matchPolicy: Equivalent
  name: multus-validating-config.k8s.io
  namespaceSelector: {}
  objectSelector: {}
  rules:
  - apiGroups:
    - k8s.cni.cncf.io
    apiVersions:
    - v1
    operations:
    - CREATE
    - UPDATE
    resources:
    - network-attachment-definitions
    scope: '*'
  sideEffects: NoneOnDryRun
  timeoutSeconds: 30
