Avoid webhook race with ovn-kubernetes on install

Add CEL expression to ignore default/openshift-ovn-kubernetes NAD to prevent
circular dependency where ovn-k fails to start because multus webhook blocks
NAD creation, while webhook uses cluster-networked pdos which require ovn-k to be running.

Signed-off-by: Patryk Diak <[email protected]>

Author: kyrtapz

bindata/network/multus-admission-controller/003-webhook.yaml

@@ -31,6 +31,9 @@ webhooks:
       # On updates, only validate if the Spec changes
       - name: CreateDeleteOrUpdatedSpec
         expression: oldObject == null || object == null || object.spec != oldObject.spec
+      # Ignore default/openshift-ovn-kubernetes NAD to avoid a race between ovn-kubernetes and the multus webhook on install
+      - name: IgnoreDefaultOVNKubernetesNAD
+        expression: object == null || object.Namespace != "openshift-ovn-kubernetes" || object.Name != "default"
     sideEffects: NoneOnDryRun
     admissionReviewVersions:
     - v1