Merge pull request #403 from kubewarden/apigroup-networkenforcer

chore: rename API group to `networkenforcer.kubewarden.io`

Author: dottorblaster

api/v1alpha1/groupversion_info.go

@@ -16,7 +16,7 @@ limitations under the License.
 
 // Package v1alpha1 contains API Schema definitions for the security v1alpha1 API group.
 // +kubebuilder:object:generate=true
-// +groupName=security.kubewarden.io
+// +groupName=networkenforcer.kubewarden.io
 package v1alpha1
 
 import (
@@ -27,7 +27,7 @@ import (
 
 var (
 	//nolint:gochecknoglobals // Kubebuilder API registration requires package-level variables
-	GroupVersion = schema.GroupVersion{Group: "security.kubewarden.io", Version: "v1alpha1"}
+	GroupVersion = schema.GroupVersion{Group: "networkenforcer.kubewarden.io", Version: "v1alpha1"}
 	//nolint:gochecknoglobals // Kubebuilder API registration requires package-level variables
 	SchemeBuilder = runtime.NewSchemeBuilder(addKnownTypes)
 	//nolint:gochecknoglobals // Kubebuilder API registration requires package-level variables

api/v1alpha1/keys.go

@@ -4,14 +4,14 @@ const (
 	// ProposalPromoteLabelKey is set on a WorkloadNetworkPolicyProposal when it
 	// is promoted to a WorkloadNetworkPolicy.
 	// Valid values are WorkloadNetworkPolicyMode strings ("monitor", "protect").
-	ProposalPromoteLabelKey = "security.kubewarden.io/promote"
+	ProposalPromoteLabelKey = "networkenforcer.kubewarden.io/promote"
 
 	// PolicyPromotedFromLabelKey is set on a WorkloadNetworkPolicy when it is
 	// created by promoting a WorkloadNetworkPolicyProposal.
-	PolicyPromotedFromLabelKey = "security.kubewarden.io/promoted-from"
+	PolicyPromotedFromLabelKey = "networkenforcer.kubewarden.io/promoted-from"
 
 	// ViolationAcknowledgePrefix is the prefix of annotation key used to acknowledge a violation.
-	// An annotation of the form security.kubewarden.io/acknowledge-<id>: "<reason>" moves the
+	// An annotation of the form networkenforcer.kubewarden.io/acknowledge-<id>: "<reason>" moves the
 	// violation record with that ID into AcknowledgedViolations.
-	ViolationAcknowledgePrefix = "security.kubewarden.io/acknowledge-"
+	ViolationAcknowledgePrefix = "networkenforcer.kubewarden.io/acknowledge-"
 )

…1alpha1_istio_workloadnetworkpolicy.yaml …1alpha1_istio_workloadnetworkpolicy.yamlapi/v1alpha1/samples/security_v1alpha1_istio_workloadnetworkpolicy.yaml renamed to api/v1alpha1/samples/networkenforcer_v1alpha1_istio_workloadnetworkpolicy.yaml api/v1alpha1/samples/security_v1alpha1_istio_workloadnetworkpolicy.yaml renamed to api/v1alpha1/samples/networkenforcer_v1alpha1_istio_workloadnetworkpolicy.yaml

@@ -1,4 +1,4 @@
-apiVersion: security.kubewarden.io/v1alpha1
+apiVersion: networkenforcer.kubewarden.io/v1alpha1
 kind: WorkloadNetworkPolicy
 metadata:
   name: istio-networkpolicy-sample

…rity_v1alpha1_workloadnetworkpolicy.yaml …rcer_v1alpha1_workloadnetworkpolicy.yamlapi/v1alpha1/samples/security_v1alpha1_workloadnetworkpolicy.yaml renamed to api/v1alpha1/samples/networkenforcer_v1alpha1_workloadnetworkpolicy.yaml api/v1alpha1/samples/security_v1alpha1_workloadnetworkpolicy.yaml renamed to api/v1alpha1/samples/networkenforcer_v1alpha1_workloadnetworkpolicy.yaml

@@ -1,4 +1,4 @@
-apiVersion: security.kubewarden.io/v1alpha1
+apiVersion: networkenforcer.kubewarden.io/v1alpha1
 kind: WorkloadNetworkPolicy
 metadata:
   name: networkpolicy-sample

…lpha1_workloadnetworkpolicyproposal.yaml …lpha1_workloadnetworkpolicyproposal.yamlapi/v1alpha1/samples/security_v1alpha1_workloadnetworkpolicyproposal.yaml renamed to api/v1alpha1/samples/networkenforcer_v1alpha1_workloadnetworkpolicyproposal.yaml api/v1alpha1/samples/security_v1alpha1_workloadnetworkpolicyproposal.yaml renamed to api/v1alpha1/samples/networkenforcer_v1alpha1_workloadnetworkpolicyproposal.yaml

@@ -1,4 +1,4 @@
-apiVersion: security.kubewarden.io/v1alpha1
+apiVersion: networkenforcer.kubewarden.io/v1alpha1
 kind: WorkloadNetworkPolicyProposal
 metadata:
   name: deployment-nginx-deployment-ingress

api/v1alpha1/violation_record.go

@@ -326,7 +326,7 @@ func (s *WorkloadNetworkPolicyStatus) mergeScrapedViolations(scraped []Violation
 	}
 }
 
-// acknowledgeViolationsFromAnnotations processes security.kubewarden.io/acknowledge-<id>
+// acknowledgeViolationsFromAnnotations processes networkenforcer.kubewarden.io/acknowledge-<id>
 // annotations and moves matching violations into AcknowledgedViolations.
 func (wnp *WorkloadNetworkPolicy) acknowledgeViolationsFromAnnotations(now metav1.Time) []AcknowledgedViolationRecord {
 	annotations := wnp.GetAnnotations()

api/v1alpha1/workloadnetworkpolicy_types.go

@@ -87,7 +87,7 @@ type WorkloadNetworkPolicyStatus struct {
 // WorkloadNetworkPolicy is the schema for the runtime network policy API.
 // Spec carries a backend-specific policy payload (Kubernetes or Istio) and a
 // mode (monitor or protect). The resource is intentionally namespaced and uses
-// the `security.kubewarden.io` group to avoid colliding with the upstream
+// the `networkenforcer.kubewarden.io` group to avoid colliding with the upstream
 // `networking.k8s.io/NetworkPolicy` kind.
 //
 // +kubebuilder:object:root=true

charts/network-enforcer/Chart.yaml

@@ -12,7 +12,7 @@ annotations:
   catalog.cattle.io/ui-component: network-enforcer
   catalog.cattle.io/display-name: NetworkEnforcer
   catalog.cattle.io/os: linux
-  catalog.cattle.io/provides-gvr: "security.kubewarden.io/v1alpha1"
+  catalog.cattle.io/provides-gvr: "networkenforcer.kubewarden.io/v1alpha1"
   catalog.cattle.io/requests-cpu: "500m"
   catalog.cattle.io/requests-memory: "128Mi"
   catalog.cattle.io/rancher-version: ">= 2.6.0-0 <= 2.12.100-0"

charts/network-enforcer/templates/controller/role.yaml

@@ -25,9 +25,10 @@ rules:
   - list
   - watch
 - apiGroups:
-  - networking.k8s.io
+  - networkenforcer.kubewarden.io
   resources:
-  - networkpolicies
+  - workloadnetworkpolicies
+  - workloadnetworkpolicyproposals
   verbs:
   - create
   - delete
@@ -37,22 +38,17 @@ rules:
   - update
   - watch
 - apiGroups:
-  - security.istio.io
+  - networkenforcer.kubewarden.io
   resources:
-  - authorizationpolicies
+  - workloadnetworkpolicies/status
   verbs:
-  - create
-  - delete
   - get
-  - list
   - patch
   - update
-  - watch
 - apiGroups:
-  - security.kubewarden.io
+  - networking.k8s.io
   resources:
-  - workloadnetworkpolicies
-  - workloadnetworkpolicyproposals
+  - networkpolicies
   verbs:
   - create
   - delete
@@ -62,10 +58,14 @@ rules:
   - update
   - watch
 - apiGroups:
-  - security.kubewarden.io
+  - security.istio.io
   resources:
-  - workloadnetworkpolicies/status
+  - authorizationpolicies
   verbs:
+  - create
+  - delete
   - get
+  - list
   - patch
   - update
+  - watch

…bewarden.io_workloadnetworkpolicies.yaml …bewarden.io_workloadnetworkpolicies.yamlcharts/network-enforcer/templates/crd/security.kubewarden.io_workloadnetworkpolicies.yaml renamed to charts/network-enforcer/templates/crd/networkenforcer.kubewarden.io_workloadnetworkpolicies.yaml charts/network-enforcer/templates/crd/security.kubewarden.io_workloadnetworkpolicies.yaml renamed to charts/network-enforcer/templates/crd/networkenforcer.kubewarden.io_workloadnetworkpolicies.yaml

@@ -4,9 +4,9 @@ kind: CustomResourceDefinition
 metadata:
   annotations:
     controller-gen.kubebuilder.io/version: v0.20.1
-  name: workloadnetworkpolicies.security.kubewarden.io
+  name: workloadnetworkpolicies.networkenforcer.kubewarden.io
 spec:
-  group: security.kubewarden.io
+  group: networkenforcer.kubewarden.io
   names:
     kind: WorkloadNetworkPolicy
     listKind: WorkloadNetworkPolicyList
@@ -33,7 +33,7 @@ spec:
           WorkloadNetworkPolicy is the schema for the runtime network policy API.
           Spec carries a backend-specific policy payload (Kubernetes or Istio) and a
           mode (monitor or protect). The resource is intentionally namespaced and uses
-          the `security.kubewarden.io` group to avoid colliding with the upstream
+          the `networkenforcer.kubewarden.io` group to avoid colliding with the upstream
           `networking.k8s.io/NetworkPolicy` kind.
         properties:
           apiVersion: