$ cat cat 01-macvlan-whereabouts.yaml 02-macvlan-whereabouts-pod.yaml
apiVersion: k8s.cni.cncf.io/v1
kind: NetworkAttachmentDefinition
metadata:
  name: onp-multus
spec:
  config: |-
    {
      "cniVersion": "0.3.1",
      "name": "onp-macvlan-whereabout",
      "type": "macvlan",
      "master": "enp8s0",
      "mode": "private",
      "ipam": {
        "type": "whereabouts",
        "range": "192.168.124.0/24",
        "routes": [
          { "dst": "0.0.0.0/0" }
        ],
        "gateway": "192.168.124.1",
        "exclude": [
           "192.168.124.1/32",
           "192.168.124.2/32",
           "192.168.124.3/32",
           "192.168.124.4/32"
        ]
      }
    }
apiVersion: v1
kind: Pod
metadata:
  name: onp-multus-pod
  namespace: onp-multus
  annotations:
    k8s.v1.cni.cncf.io/networks: onp-multus
spec:
  containers:
  - name: onp-multus-container
    command: ["/bin/bash", "-c", "trap : TERM INT; sleep infinity & wait"]
    image: quay.io/onp/onp-tools
  nodeSelector:
    kubernetes.io/hostname: master2.ocp.example.local
  securityContext:
    runAsNonRoot: true
    allowPrivilegeEscalation: false
    readOnlyRootFilesystem: true
    seccompProfile:
      type: RuntimeDefault
    capabilities:
      drop:
      - ALL