UPSTREAM: 2078: Add Network Policy to e2e test bundles

Adds a Netwok Policy to the end-to-end test bundles and adds a check to
the tests that the Network Policy resources are created.

Signed-off-by: Tayler Geiger <[email protected]>

Author: trgeiger

hack/test/pre-upgrade-setup.sh

@@ -102,6 +102,16 @@ rules:
     - "watch"
     - "bind"
     - "escalate"
+  - apiGroups:
+    - networking.k8s.io
+    resources:
+    - networkpolicies
+    verbs:
+    - get
+    - list
+    - create
+    - update
+    - delete
   - apiGroups:
     - "olm.operatorframework.io"
     resources:

test/e2e/cluster_extension_install_test.go

@@ -16,6 +16,7 @@ import (
 	"gopkg.in/yaml.v2"
 	appsv1 "k8s.io/api/apps/v1"
 	corev1 "k8s.io/api/core/v1"
+	networkingv1 "k8s.io/api/networking/v1"
 	rbacv1 "k8s.io/api/rbac/v1"
 	apiextensionsv1 "k8s.io/apiextensions-apiserver/pkg/apis/apiextensions/v1"
 	"k8s.io/apimachinery/pkg/api/errors"
@@ -162,6 +163,23 @@ func createClusterRoleAndBindingForSA(ctx context.Context, name string, sa *core
 					"escalate",
 				},
 			},
+			{
+				APIGroups: []string{
+					"networking.k8s.io",
+				},
+				Resources: []string{
+					"networkpolicies",
+				},
+				Verbs: []string{
+					"get",
+					"list",
+					"watch",
+					"create",
+					"update",
+					"patch",
+					"delete",
+				},
+			},
 		},
 	}
 	err := c.Create(ctx, cr)
@@ -360,6 +378,11 @@ func TestClusterExtensionInstallRegistry(t *testing.T) {
 			require.NoError(t, c.Get(context.Background(), types.NamespacedName{Namespace: ns.Name, Name: "test-configmap"}, &cm))
 			require.Contains(t, cm.Annotations, "shouldNotTemplate")
 			require.Contains(t, cm.Annotations["shouldNotTemplate"], "{{ $labels.namespace }}")
+			t.Log("By eventually creating the NetworkPolicy named 'test-operator-network-policy'")
+			require.EventuallyWithT(t, func(ct *assert.CollectT) {
+				var np networkingv1.NetworkPolicy
+				assert.NoError(ct, c.Get(context.Background(), types.NamespacedName{Name: "test-operator-network-policy", Namespace: ns.Name}, &np))
+			}, pollDuration, pollInterval)
 		})
 	}
 }

testdata/images/bundles/test-operator/v1.0.0/manifests/testoperator.clusterserviceversion.yaml

@@ -95,6 +95,16 @@ spec:
           - update
           - patch
           - delete
+        - apiGroups:
+          - networking.k8s.io
+          resources:
+          - networkpolicies
+          verbs:
+          - get
+          - list
+          - create
+          - update
+          - delete
         - apiGroups:
           - coordination.k8s.io
           resources:

testdata/images/bundles/test-operator/v1.0.0/manifests/testoperator.networkpolicy.yaml

@@ -0,0 +1,8 @@
+apiVersion: networking.k8s.io/v1
+kind: NetworkPolicy
+metadata:
+  name: test-operator-network-policy
+spec:
+  podSelector: {}
+  policyTypes:
+  - Ingress