This is a clone of issue OCPBUGS-18317. The following is the description of the original issue:
—
With IC ovnkube-node requires namespaces/status permissions.

After talking to trozet@redhat.com it seems that this is not necessary, we previously used that approach because ovnkube-node only listened for local pods it needs to know this information/event from a remote gateway pod. Now since ovnkube-node is watching all pods, it can just listen for the remote pod and then sync conntrack.