Multi-NetworkPolicy when defined with protocol defined and port undefined, we expect it to match all ports with defined protocol (as per documentation). But policy is not being applied and it allows all traffic.

https://docs.openshift.com/container-platform/4.17/rest_api/network_apis/multinetworkpolicy-k8s-cni-cncf-io-v1beta1.html#spec-egress-ports-2

    4.18.ec2 

    --> Apply below policy. ports array should have only protocol defined but not port.

apiVersion: k8s.cni.cncf.io/v1beta1
kind: MultiNetworkPolicy
metadata:
  annotations:
    k8s.v1.cni.cncf.io/policy-for: policy-test-ns1/bond-nad,policy-test-ns2/bond-nad
  name: egress-port
  namespace: policy-test-ns1
spec:
  podSelector:
    matchLabels:
      app: pod1
  policyTypes:
  - Egress
  egress:
  - ports:
     - protocol: TCP

    1. Create SRIOV VFs, bond NAD and create pods that attach to bond NAD
    2. Apply MultiNetworkPolicy as mentioned above.
    3. Test egress traffic. 
    

    Egress works as if no policy is applied. 

    Egress should work only for TCP protocol to all ports

    Must gather : https://drive.google.com/drive/folders/1Le1PdIGiOt965Hqr2xTUXyeDAUGhYYiN?usp=sharing