SameLabels support for ACNP peer Namespace selection (#4537)

This PR adds the `sameLabels` field in ACNP peer's namespaces. The usecase for this field is to allow cluster admins to create ACNPs that isolate Namespaces based on their label values. For example, if there are numerous Namespaces in the cluster that has label tier=production and other Namespaces with label tier=dev, admins can create a single ACNP that says the production Namespaces can only communicate within themselves, and same for the dev Namespaces. Signed-off-by: Dyanngg <[email protected]>
antrea-io · Mar 19, 2024 · 59f642a · 59f642a
1 parent bc54253
commit 59f642a
Show file tree

Hide file tree

Showing 28 changed files with 2,305 additions and 1,483 deletions.
diff --git a/build/charts/antrea/crds/clusternetworkpolicy.yaml b/build/charts/antrea/crds/clusternetworkpolicy.yaml
@@ -1076,11 +1076,17 @@ spec:
                                   type: object
                             namespaces:
                               type: object
+                              maxProperties: 1
+                              minProperties: 1
                               properties:
                                 match:
+                                  type: string
                                   enum:
                                     - Self
-                                  type: string
+                                sameLabels:
+                                  type: array
+                                  items:
+                                    type: string
                             ipBlock:
                               type: object
                               properties:
@@ -1352,11 +1358,17 @@ spec:
                                   type: object
                             namespaces:
                               type: object
+                              maxProperties: 1
+                              minProperties: 1
                               properties:
                                 match:
+                                  type: string
                                   enum:
                                     - Self
-                                  type: string
+                                sameLabels:
+                                  type: array
+                                  items:
+                                    type: string
                             ipBlock:
                               type: object
                               properties:

diff --git a/build/yamls/antrea-aks.yml b/build/yamls/antrea-aks.yml
@@ -1642,11 +1642,17 @@ spec:
                                   type: object
                             namespaces:
                               type: object
+                              maxProperties: 1
+                              minProperties: 1
                               properties:
                                 match:
+                                  type: string
                                   enum:
                                     - Self
-                                  type: string
+                                sameLabels:
+                                  type: array
+                                  items:
+                                    type: string
                             ipBlock:
                               type: object
                               properties:
@@ -1918,11 +1924,17 @@ spec:
                                   type: object
                             namespaces:
                               type: object
+                              maxProperties: 1
+                              minProperties: 1
                               properties:
                                 match:
+                                  type: string
                                   enum:
                                     - Self
-                                  type: string
+                                sameLabels:
+                                  type: array
+                                  items:
+                                    type: string
                             ipBlock:
                               type: object
                               properties:

diff --git a/build/yamls/antrea-crds.yml b/build/yamls/antrea-crds.yml
@@ -1635,11 +1635,17 @@ spec:
                                   type: object
                             namespaces:
                               type: object
+                              maxProperties: 1
+                              minProperties: 1
                               properties:
                                 match:
+                                  type: string
                                   enum:
                                     - Self
-                                  type: string
+                                sameLabels:
+                                  type: array
+                                  items:
+                                    type: string
                             ipBlock:
                               type: object
                               properties:
@@ -1911,11 +1917,17 @@ spec:
                                   type: object
                             namespaces:
                               type: object
+                              maxProperties: 1
+                              minProperties: 1
                               properties:
                                 match:
+                                  type: string
                                   enum:
                                     - Self
-                                  type: string
+                                sameLabels:
+                                  type: array
+                                  items:
+                                    type: string
                             ipBlock:
                               type: object
                               properties:

diff --git a/build/yamls/antrea-eks.yml b/build/yamls/antrea-eks.yml
@@ -1642,11 +1642,17 @@ spec:
                                   type: object
                             namespaces:
                               type: object
+                              maxProperties: 1
+                              minProperties: 1
                               properties:
                                 match:
+                                  type: string
                                   enum:
                                     - Self
-                                  type: string
+                                sameLabels:
+                                  type: array
+                                  items:
+                                    type: string
                             ipBlock:
                               type: object
                               properties:
@@ -1918,11 +1924,17 @@ spec:
                                   type: object
                             namespaces:
                               type: object
+                              maxProperties: 1
+                              minProperties: 1
                               properties:
                                 match:
+                                  type: string
                                   enum:
                                     - Self
-                                  type: string
+                                sameLabels:
+                                  type: array
+                                  items:
+                                    type: string
                             ipBlock:
                               type: object
                               properties:

diff --git a/build/yamls/antrea-gke.yml b/build/yamls/antrea-gke.yml
@@ -1642,11 +1642,17 @@ spec:
                                   type: object
                             namespaces:
                               type: object
+                              maxProperties: 1
+                              minProperties: 1
                               properties:
                                 match:
+                                  type: string
                                   enum:
                                     - Self
-                                  type: string
+                                sameLabels:
+                                  type: array
+                                  items:
+                                    type: string
                             ipBlock:
                               type: object
                               properties:
@@ -1918,11 +1924,17 @@ spec:
                                   type: object
                             namespaces:
                               type: object
+                              maxProperties: 1
+                              minProperties: 1
                               properties:
                                 match:
+                                  type: string
                                   enum:
                                     - Self
-                                  type: string
+                                sameLabels:
+                                  type: array
+                                  items:
+                                    type: string
                             ipBlock:
                               type: object
                               properties:

diff --git a/build/yamls/antrea-ipsec.yml b/build/yamls/antrea-ipsec.yml
@@ -1642,11 +1642,17 @@ spec:
                                   type: object
                             namespaces:
                               type: object
+                              maxProperties: 1
+                              minProperties: 1
                               properties:
                                 match:
+                                  type: string
                                   enum:
                                     - Self
-                                  type: string
+                                sameLabels:
+                                  type: array
+                                  items:
+                                    type: string
                             ipBlock:
                               type: object
                               properties:
@@ -1918,11 +1924,17 @@ spec:
                                   type: object
                             namespaces:
                               type: object
+                              maxProperties: 1
+                              minProperties: 1
                               properties:
                                 match:
+                                  type: string
                                   enum:
                                     - Self
-                                  type: string
+                                sameLabels:
+                                  type: array
+                                  items:
+                                    type: string
                             ipBlock:
                               type: object
                               properties:

diff --git a/build/yamls/antrea.yml b/build/yamls/antrea.yml
@@ -1642,11 +1642,17 @@ spec:
                                   type: object
                             namespaces:
                               type: object
+                              maxProperties: 1
+                              minProperties: 1
                               properties:
                                 match:
+                                  type: string
                                   enum:
                                     - Self
-                                  type: string
+                                sameLabels:
+                                  type: array
+                                  items:
+                                    type: string
                             ipBlock:
                               type: object
                               properties:
@@ -1918,11 +1924,17 @@ spec:
                                   type: object
                             namespaces:
                               type: object
+                              maxProperties: 1
+                              minProperties: 1
                               properties:
                                 match:
+                                  type: string
                                   enum:
                                     - Self
-                                  type: string
+                                sameLabels:
+                                  type: array
+                                  items:
+                                    type: string
                             ipBlock:
                               type: object
                               properties: