add network policy

[ykadowak]

Description:

Added network policy with the configuration as in the table. Also only allowed traffic within the deployed namespace. Plus please note that the egress of the filter gateway is fully open due to the wide variety of user-defined filter configurations.

from \ to	agent	discoverer	filter gateway	lb gateway	index	User-defined Filters	k8s apiserver
agent	N/A	⛔	⛔	⛔	⛔	⛔	⛔
discoverer	⛔	N/A	⛔	⛔	⛔	⛔	✅
filter gateway	⛔	⛔	N/A	✅	⛔	✅	⛔
lb gateway	✅	✅	⛔	N/A	⛔	⛔	⛔
index	✅	✅	⛔	⛔	N/A	⛔	⛔
User-defined Filters	⛔	⛔	⛔	⛔	⛔	N/A	⛔
k8s apiserver	✅	✅	✅	✅	✅	✅	N/A

Confirmed this configuration passes e2e with the steps below.

make k8s/vald/deploy HELM_VALUES=example/helm/values.yaml
make e2e

Related Issue:

Versions:

• Go Version: 1.20.3
• Docker Version: 20.10.8
• Kubernetes Version: 1.22.0
• NGT Version: 2.0.9

Checklist:

• I have read the CONTRIBUTING document and completed our CLA agreement.
• I have checked open Pull Requests for the similar feature or fixes?

Special notes for your reviewer:

This PR will be followed by these PRs below.

• e2e test on PR when there's helm template change
• User-defined network policy for things like OpenTelemetry

NetworkPolicy is off by default until these changes are done.

[vdaas-ci]

[CHATOPS:HELP] ChatOps commands.

• 🙆‍♀️ /approve - approve
• 💌 /changelog - replace the PR body by changelog details
• 🍱 /format - format codes and add licenses
• ✅ /gen-test - generate test codes
• 🏷️ /label - add labels
• ⏪ /rebase - rebase main
• 🔚 2️⃣ 🔚 /label actions/e2e-deploy - run E2E deploy & integration test

[cloudflare-workers-and-pages]

Deploying with    Cloudflare Pages

Latest commit:	6aa2081
Status:	✅  Deploy successful!
Preview URL:	https://b632e142.vald.pages.dev
Branch Preview URL:	https://feature-charts-add-network-p.vald.pages.dev

View logs

[ykadowak]

There is a known bug in kube-linter and caused the K8s manifests / runner / kubelinter for vald chart fail. The fix should be released soon so we are leaving it.
stackrox/kube-linter#546

[kpango]

LGTM

[hlts2]

LGTM!