updated mtpnc crd and pni crd by adding default deny acl bool field

rejain789 · rejain789 · commit c395ed9f3760 · 2024-12-12T14:42:46.000-08:00
diff --git a/crd/multitenancy/api/v1alpha1/multitenantpodnetworkconfig.go b/crd/multitenancy/api/v1alpha1/multitenantpodnetworkconfig.go
@@ -85,6 +85,8 @@ type MultitenantPodNetworkConfigStatus struct {
 	// InterfaceInfos describes all of the network container goal state for this Pod
 	// +kubebuilder:validation:Optional
 	InterfaceInfos []InterfaceInfo `json:"interfaceInfos,omitempty"`
+	// DefaultDenyAcl bool indicates whether default deny policy will be present on the pods upon pod creation
+	DefaultDenyACL bool `json:"defaultDenyACL"`
 }
 
 func init() {
diff --git a/crd/multitenancy/api/v1alpha1/podnetworkinstance.go b/crd/multitenancy/api/v1alpha1/podnetworkinstance.go
@@ -56,6 +56,9 @@ type PodNetworkInstanceSpec struct {
 	// optional for now in case orchestrator uses the deprecated fields
 	// +kubebuilder:validation:Optional
 	PodNetworkConfigs []PodNetworkConfig `json:"podNetworkConfigs"`
+	// DefaultDenyAcl bool indicates whether default deny policy will be present on the pods upon pod creation
+	// +kubebuilder:default=false
+	DefaultDenyACL bool `json:"defaultDenyACL"`
 }
 
 // PodNetworkInstanceStatus defines the observed state of PodNetworkInstance

Original file line number	Diff line number	Diff line change
`@@ -85,6 +85,8 @@ type MultitenantPodNetworkConfigStatus struct {`
`85`	`85`	`// InterfaceInfos describes all of the network container goal state for this Pod`
`86`	`86`	`// +kubebuilder:validation:Optional`
`87`	`87`	InterfaceInfos []InterfaceInfo `json:"interfaceInfos,omitempty"`
	`88`	`+ // DefaultDenyAcl bool indicates whether default deny policy will be present on the pods upon pod creation`
	`89`	+ DefaultDenyACL bool `json:"defaultDenyACL"`
`88`	`90`	`}`
`89`	`91`
`90`	`92`	`func init() {`
Original file line number	Diff line number	Diff line change
`@@ -56,6 +56,9 @@ type PodNetworkInstanceSpec struct {`
`56`	`56`	`// optional for now in case orchestrator uses the deprecated fields`
`57`	`57`	`// +kubebuilder:validation:Optional`
`58`	`58`	PodNetworkConfigs []PodNetworkConfig `json:"podNetworkConfigs"`
	`59`	`+ // DefaultDenyAcl bool indicates whether default deny policy will be present on the pods upon pod creation`
	`60`	`+ // +kubebuilder:default=false`
	`61`	+ DefaultDenyACL bool `json:"defaultDenyACL"`
`59`	`62`	`}`
`60`	`63`
`61`	`64`	`// PodNetworkInstanceStatus defines the observed state of PodNetworkInstance`