[ST] Fix bridge client network policies creation

[jankalinic]

Type of change

• Refactoring

Description

This pull request addresses the system test failure for Kafka bridge clients caused by the enabled default denial of network accessibility. The fix introduces network policy creation methods specific to the bridge client which is being deployed, enabling communication required for system testing.

Checklist

• Write tests
• Make sure all tests pass
• Update documentation
• Check RBAC rights for Kubernetes / OpenShift roles
• Try your changes from Pod inside your Kubernetes and OpenShift cluster, not just locally
• Reference relevant issue(s) and close them after merging
• Update CHANGELOG.md
• Supply screenshots for visual changes, such as Grafana dashboards

[see-quick]

👍 Thanks

[see-quick]

/azp run regression

[azure-pipelines]

Azure Pipelines successfully started running 1 pipeline(s).

[jankalinic]

@strimzi-ci run tests --cluster-type=ocp --cluster-version=4.14 --install-type=bundle --testcase=HttpBridgeST,HttpBridgeScramShaST,HttpBridgeTlsST,HttpBridgeKafkaExternalListenersST --env=STRIMZI_KRAFT_ENABLED=true

[strimzi-ci]

▶️ Build started - check Jenkins for more info. ▶️

[strimzi-ci]

✔️ Test Summary ✔️

TEST_PROFILE: all
GROUPS:
TEST_CASE: HttpBridgeST,HttpBridgeScramShaST,HttpBridgeTlsST,HttpBridgeKafkaExternalListenersST
TOTAL: 12
PASS: 12
FAIL: 0
SKIP: 0
BUILD_NUMBER: 6
OCP_VERSION: 4.14
BUILD_IMAGES: false
FIPS_ENABLED: false
PARALLEL_COUNT: 5
EXCLUDED_GROUPS: loadbalancer,nodeport,olm
ENV_VARIABLES: STRIMZI_KRAFT_ENABLED=true

[jankalinic]

@strimzi-ci run tests --cluster-type=ocp --cluster-version=4.14 --install-type=bundle --testcase=MetricsST,OauthTlsST,OauthPlainST,OauthPasswordGrantsST --env=STRIMZI_KRAFT_ENABLED=true

[strimzi-ci]

▶️ Build started - check Jenkins for more info. ▶️

[strimzi-ci]

❌ Test Summary ❌

TEST_PROFILE: all
GROUPS:
TEST_CASE: MetricsST,OauthTlsST,OauthPlainST,OauthPasswordGrantsST
TOTAL: 14
PASS: 10
FAIL: 4
SKIP: 0
BUILD_NUMBER: 7
OCP_VERSION: 4.14
BUILD_IMAGES: false
FIPS_ENABLED: false
PARALLEL_COUNT: 5
EXCLUDED_GROUPS: loadbalancer,nodeport,olm
ENV_VARIABLES: STRIMZI_KRAFT_ENABLED=true

❗ Test Failures ❗

• testKafkaBridgeMetrics in io.strimzi.systemtest.metrics.MetricsST
• io.strimzi.systemtest.security.oauth.OauthPasswordGrantsST
• io.strimzi.systemtest.security.oauth.OauthPlainST
• io.strimzi.systemtest.security.oauth.OauthTlsST

Re-run command:
@strimzi-ci run tests --profile=all --testcase=io.strimzi.systemtest.metrics.MetricsST#testKafkaBridgeMetrics,io.strimzi.systemtest.security.oauth.OauthPasswordGrantsST,io.strimzi.systemtest.security.oauth.OauthPlainST,io.strimzi.systemtest.security.oauth.OauthTlsST

[jankalinic]

re-requesting reviews due to changes being made for metrics ST, where scraper could not access bridge

[jankalinic]

@strimzi-ci run tests --cluster-type=ocp --cluster-version=4.14 --install-type=bundle --testcase=MetricsST,OauthTlsST,OauthPlainST,OauthPasswordGrantsST --env=STRIMZI_KRAFT_ENABLED=true

[strimzi-ci]

▶️ Build started - check Jenkins for more info. ▶️

[strimzi-ci]

❌ Test Summary ❌

TEST_PROFILE: all
GROUPS:
TEST_CASE: MetricsST,OauthTlsST,OauthPlainST,OauthPasswordGrantsST
TOTAL: 14
PASS: 11
FAIL: 3
SKIP: 0
BUILD_NUMBER: 11
OCP_VERSION: 4.14
BUILD_IMAGES: false
FIPS_ENABLED: false
PARALLEL_COUNT: 5
EXCLUDED_GROUPS: loadbalancer,nodeport,olm
ENV_VARIABLES: STRIMZI_KRAFT_ENABLED=true

❗ Test Failures ❗

• io.strimzi.systemtest.security.oauth.OauthPasswordGrantsST
• io.strimzi.systemtest.security.oauth.OauthPlainST
• io.strimzi.systemtest.security.oauth.OauthTlsST

Re-run command:
@strimzi-ci run tests --profile=all --testcase=io.strimzi.systemtest.security.oauth.OauthPasswordGrantsST,io.strimzi.systemtest.security.oauth.OauthPlainST,io.strimzi.systemtest.security.oauth.OauthTlsST

[jankalinic]

3 failing tests - all because of keycloak setup - not related to this PR