STOR-2331: Add NetworkPolicy manifests for LSO

[dobsonj]

https://issues.redhat.com/browse/STOR-2331

Manually verified:

1. These NetworkPolicy manifests are deployed to the same namespace as the operator (openshift-local-storage) when the operator is installed
2. local-storage-operator, diskmaker-discovery, and diskmaker-manager pods have the correct labels + policies applied. Used nmap to verify expected ingress ports are accessible and others are not.
3. A standalone pod in the namespace without any labels applied can not reach the outside world (deny-all policy is in effect).

/cc @openshift/storage @mpatlasov

[openshift-ci-robot]

@dobsonj: This pull request references STOR-2331 which is a valid jira issue.

Details

In response to this:

https://issues.redhat.com/browse/STOR-2331

Manually verified:

1. These NetworkPolicy manifests are deployed to the same namespace as the operator (openshift-local-storage) when the operator is installed
2. local-storage-operator, diskmaker-discovery, and diskmaker-manager pods have the correct labels + policies applied. Used nmap to verify expected ingress ports are accessible and others are not.
3. A standalone pod in the namespace without any labels applied can not reach the outside world (deny-all policy is in effect).

/cc @openshift/storage @mpatlasov

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

[openshift-ci]

@dobsonj: GitHub didn't allow me to request PR reviews from the following users: openshift/storage.

Note that only openshift members and repo collaborators can review this PR, and authors cannot review their own PRs.

Details

In response to this:

https://issues.redhat.com/browse/STOR-2331

Manually verified:

1. These NetworkPolicy manifests are deployed to the same namespace as the operator (openshift-local-storage) when the operator is installed
2. local-storage-operator, diskmaker-discovery, and diskmaker-manager pods have the correct labels + policies applied. Used nmap to verify expected ingress ports are accessible and others are not.
3. A standalone pod in the namespace without any labels applied can not reach the outside world (deny-all policy is in effect).

/cc @openshift/storage @mpatlasov

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

[openshift-ci]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: dobsonj

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details

Needs approval from an approver in each of these files:

• OWNERS [dobsonj]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[openshift-ci]

@dobsonj: all tests passed!

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

[mpatlasov]

/lgtm

[ropatil010]

Adding label and will perform this as post-merge testing since this is 3rd level operator.
/label qe-approved

[openshift-ci-robot]

@dobsonj: This pull request references STOR-2331 which is a valid jira issue.

Details

In response to this:

https://issues.redhat.com/browse/STOR-2331

Manually verified:

1. These NetworkPolicy manifests are deployed to the same namespace as the operator (openshift-local-storage) when the operator is installed
2. local-storage-operator, diskmaker-discovery, and diskmaker-manager pods have the correct labels + policies applied. Used nmap to verify expected ingress ports are accessible and others are not.
3. A standalone pod in the namespace without any labels applied can not reach the outside world (deny-all policy is in effect).

/cc @openshift/storage @mpatlasov

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

[openshift-bot]

[ART PR BUILD NOTIFIER]

Distgit: local-storage-operator
This PR has been included in build local-storage-operator-container-v4.20.0-202507012145.p0.g77aa6bf.assembly.stream.el9.
All builds following this will include this PR.

[openshift-bot]

[ART PR BUILD NOTIFIER]

Distgit: local-storage-mustgather
This PR has been included in build ose-local-storage-mustgather-container-v4.20.0-202507012145.p0.g77aa6bf.assembly.stream.el9.
All builds following this will include this PR.

[openshift-bot]

[ART PR BUILD NOTIFIER]

Distgit: local-storage-diskmaker
This PR has been included in build local-storage-diskmaker-container-v4.20.0-202507012145.p0.g77aa6bf.assembly.stream.el9.
All builds following this will include this PR.