The newly added webhook does not allow setting k8s.ovn.org/node-mgmt-port and k8s.ovn.org/gateway-mtu-support which should be allowed

In one of the ovnkube-node pods (ovnkube-controller container) run the following:
1. Create a kubeconfig which impersonates ovnkube-node:
  export KUBECONFIG=/tmp/kubeconfig
  kubectl config set-cluster default-cluster --server=https://${KUBERNETES_SERVICE_HOST}:6443 --certificate-authority /var/run/secrets/kubernetes.io/serviceaccount/ca.crt --embed-certs
  kubectl config set-credentials default --client-key /etc/ovn/ovnkube-node-certs/ovnkube-client-current.pem --client-certificate /etc/ovn/ovnkube-node-certs/ovnkube-client-current.pem --embed-certs
  kubectl config set-context default-system --cluster default-cluster --user default
  kubectl config use-context default-system

2. Try to set k8s.ovn.org/node-mgmt-port and k8s.ovn.org/gateway-mtu-support:
  oc get node $(hostname) -o yaml > /tmp/current_node.yaml
  kubectl patch -f /tmp/current_node.yaml --type='json' --subresource=status -p='[{"op": "add", "path": "/metadata/annotations/k8s.ovn.org~1node-mgmt-port", "value":"{\"PfId\":1,\"FuncId\":1}"}]'
  kubectl patch -f /tmp/current_node.yaml --type='json' --subresource=status -p='[{"op": "add", "path": "/metadata/annotations/k8s.ovn.org~1gateway-mtu-support", "value":"true"}]'
  

Error from server (Forbidden): admission webhook "node.network-node-identity.openshift.io" denied the request: ovnkube-node on node: "pdiak-10-19-2023-kxnc6-master-1.c.openshift-gce-devel.internal" is not allowed to set the following annotations: [k8s.ovn.org/node-mgmt-port]
Error from server (Forbidden): admission webhook "node.network-node-identity.openshift.io" denied the request: ovnkube-node on node: "pdiak-10-19-2023-kxnc6-master-1.c.openshift-gce-devel.internal" is not allowed to set the following annotations: [k8s.ovn.org/gateway-mtu-support]

Setting k8s.ovn.org/node-mgmt-port and k8s.ovn.org/gateway-mtu-support annotations should succeed

Missing annotations are only used in DPU deployments so it should be easier to verify it with the steps provided above.