Summary

Modify the ClusterLogForwarder API
To "opt-in" to NetworkPolicy deployment
So that administrators control when NetworkPolicy is managed by the operator

Acceptance Criteria

• Verify a unique NP is deployed for the collector when spec'd in the ClusterLogForwarder
• Verify NP is removed when the field is removed from the collector spec
• Verify NP restricts ingress/egress ports according to the spec'd ruleset

Notes

• Discussion
• Suggested API:

  spec:
    collector:
      networkpolicy:
        ruleSet: (enum: AllowAll, RestrictIngressEgress)
  
  AllowAll: Allow all ingress and egress
  RestrictIngressEgress: 
     Restrict ingress to: metrics port, input receiver ports or default
     Restrict egress to: output ports or output type default port