Description of problem:

When CNV is installed the kubemacpool mutatingwebhook interferes with Pods openshift-ovn-kubernetes because the namespace is not tagged with the kubemacpool/ignoreAdmission:""

If the kubemacpool controller is down or not available and a pod is deleted or node is restarted the pods can not be recreated or restarted waiting for the kubemacpool.

Version-Release number of selected component (if applicable):
OCP 4.3.5
CNV 2.2

Steps to Reproduce:
1. kubemacpool in CrashLoopBackOff
2. delete one of the ovnkube-node pods in the openshift-ovn-kubernetes namespace
3. container won't be able to run

Expected results:

Two options:
1) CNV operator should label the openshift-ovn-kubernetes with label kubemacpool/ignoreAdmission:"" during deployment
2) The kubemacpool should use a whitelist model instead of a blacklist model when determining in which namespaces to apply