add e2e for networkpolicy lax mode (#5800)

Signed-off-by: Mengxin Liu <liumengxinfly@gmail.com>

Author: oilbeater

.github/workflows/build-x86-image.yaml

@@ -695,6 +695,9 @@ jobs:
           - ipv4
           - ipv6
           - dual
+        np-enforcement:
+          - standard
+          - lax
     steps:
       - uses: jlumbroso/free-disk-space@v1.3.1
         with:
@@ -755,6 +758,8 @@ jobs:
             ${{ runner.os }}-e2e-go-${{ env.GO_VERSION }}-x86-${{ github.base_ref }}-
 
       - name: Install kind
+        env:
+          NP_ENFORCEMENT: "${{ matrix.np-enforcement }}"
         uses: helm/kind-action@v1.12.0
         with:
           version: ${{ env.KIND_VERSION }}
@@ -890,6 +895,9 @@ jobs:
           - ipv4
           - ipv6
           - dual
+        np-enforcement:
+          - standard
+          - lax
     steps:
       - uses: jlumbroso/free-disk-space@v1.3.1
         with:
@@ -957,6 +965,8 @@ jobs:
           make kind-ghcr-pull kind-init-${{ matrix.ip-family }}
 
       - name: Install Kube-OVN
+        env:
+          NP_ENFORCEMENT: "${{ matrix.np-enforcement }}"
         id: install
         run: make kind-install-${{ matrix.ip-family }}
 

dist/images/install.sh

@@ -13,6 +13,7 @@ VLAN_NIC=${VLAN_NIC:-}
 HW_OFFLOAD=${HW_OFFLOAD:-false}
 ENABLE_LB=${ENABLE_LB:-true}
 ENABLE_NP=${ENABLE_NP:-true}
+NP_ENFORCEMENT=${NP_ENFORCEMENT:-standard}
 ENABLE_EIP_SNAT=${ENABLE_EIP_SNAT:-true}
 LS_DNAT_MOD_DL_DST=${LS_DNAT_MOD_DL_DST:-true}
 LS_CT_SKIP_DST_LPORT_IPS=${LS_CT_SKIP_DST_LPORT_IPS:-true}
@@ -4691,6 +4692,7 @@ spec:
           - --pod-nic-type=$POD_NIC_TYPE
           - --enable-lb=$ENABLE_LB
           - --enable-np=$ENABLE_NP
+          - --np-enforcement=$NP_ENFORCEMENT
           - --enable-eip-snat=$ENABLE_EIP_SNAT
           - --enable-external-vpc=$ENABLE_EXTERNAL_VPC
           - --logtostderr=false