diff --git a/deploy/addons/gcp-auth/gcp-auth-webhook.yaml.tmpl.tmpl b/deploy/addons/gcp-auth/gcp-auth-webhook.yaml.tmpl.tmpl
index c9fe7d0018..22dfd77dc4 100644
--- a/deploy/addons/gcp-auth/gcp-auth-webhook.yaml.tmpl.tmpl
+++ b/deploy/addons/gcp-auth/gcp-auth-webhook.yaml.tmpl.tmpl
@@ -95,7 +95,7 @@ spec:
       containers:
         - name: gcp-auth
           image: {{.CustomRegistries.GCPAuthWebhook  | default .ImageRepository | default .Registries.GCPAuthWebhook }}{{.Images.GCPAuthWebhook}}
-          imagePullPolicy: IfNotPresent
+          imagePullPolicy: Never
           ports:
             - containerPort: 8443
           volumeMounts:
@@ -169,25 +169,6 @@ webhooks:
     apiVersions: ["*"]
     resources: ["pods"]
     scope: "*"
-- name: gcp-auth-mutate-ns.k8s.io
-  failurePolicy: Ignore
-  objectSelector:
-    matchExpressions:
-      - key: gcp-auth-skip-secret
-        operator: DoesNotExist
-  sideEffects: None
-  admissionReviewVersions: ["v1","v1beta1"]
-  clientConfig:
-    service:
-      name: gcp-auth
-      namespace: gcp-auth
-      path: "/mutate/ns"
-  rules:
-  - operations: ["CREATE"]
-    apiGroups: ["*"]
-    apiVersions: ["*"]
-    resources: ["namespaces"]
-    scope: "*"
 - name: gcp-auth-mutate-sa.k8s.io
   failurePolicy: Ignore
   sideEffects: None