Or Mergi

@iholder101 the above jobs seem to fail due to missing network-policy for allowing access to Kubevirt webhook server (from different namespace, such as the tests namespace). The following network-policy should...

Yay we made some progress now that it fail with different error : ``` Internal error occurred: failed calling webhook "kubevirt-update-validator.kubevirt.io": failed to call webhook: Post "https://kubevirt-operator-webhook.kubevirt.svc:443/kubevirt-validate-update?timeout=10s": context deadline exceeded...

> Any suggestions on the best way of doing so? How can I figure out the network requirements? I think you can start by going over kubevirt component manifests and...

@iholder101 would you try this one https://github.com/kubevirt/kubevirt/pull/14897#issuecomment-2958533168?

@iholder101 Consider the csv-gen alternative, where Kubevirt's csv-gen tool will generate network-policies for Kubevirt core components as well (and not only for virt-operator), a dedicated controller can come later.

@iholder101 could please try again fixing the missing namespace in the NPs manifests? (https://github.com/kubevirt/kubevirt/pull/14897#discussion_r2164490561, https://github.com/kubevirt/kubevirt/pull/14897#discussion_r2164490742)

Hi @bgaussen , well done! It looks like Kubevirt calls sidecar hooks also at the migration target [here](https://github.com/kubevirt/kubevirt/blob/main/pkg/virt-launcher/virtwrap/live-migration-target.go#L175-L182) Could you please ensure the NBP sidecar executes at the target?

> This makes the examples usable, thanks for that. > > @ormergi one request for your opinion: I see the C-UDN being configured has `physicalNetworkName: tenantblue` as its value. This...

/cc @SchSeba

The code that resolve this request has merged. Thank you @squeed /close