Add missing CNCC NetworkPolicies

Author: danwinship

bindata/cloud-network-config-controller/managed/networkpolicy.yaml

@@ -0,0 +1,15 @@
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+  name: cloud-network-config-controller
+  namespace: {{.HostedClusterNamespace}}
+spec:
+  podSelector:
+    matchLabels:
+      app: cloud-network-config-controller
+  policyTypes:
+    - Egress
+  egress:
+    # CNCC needs access to apiserver and cloud APIs, possibly via a proxy... for now we
+    # just allow all egress.
+    - {}

bindata/cloud-network-config-controller/self-hosted/networkpolicy.yaml

@@ -0,0 +1,15 @@
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+  name: cloud-network-config-controller
+  namespace: openshift-cloud-network-config-controller
+spec:
+  podSelector:
+    matchLabels:
+      app: cloud-network-config-controller
+  policyTypes:
+    - Egress
+  egress:
+    # CNCC needs access to apiserver and cloud APIs, possibly via a proxy... for now we
+    # just allow all egress.
+    - {}

bindata/network/ovn-kubernetes/managed/networkpolicy.yaml

@@ -2,7 +2,7 @@ kind: NetworkPolicy
 apiVersion: networking.k8s.io/v1
 metadata:
   name: ovn-kubernetes
-  namespace: openshift-ovn-kubernetes
+  namespace: {{.HostedClusterNamespace}}
 spec:
   podSelector:
     matchLabels:

manifests/01-cncc-namespace.yaml

@@ -14,3 +14,16 @@ metadata:
     openshift.io/node-selector: ""
     openshift.io/description: "OpenShift cloud network config controller namespace - a controller used to manage cloud-level network configuration"
     workload.openshift.io/allowed: "management"
+---
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+  name: default-deny
+  namespace: openshift-cloud-network-config-operator
+spec:
+  podSelector: {}
+  policyTypes:
+    - Ingress
+    - Egress
+  ingress: []
+  egress: []