POC - Ingress annotation for precompiled policies

[shaun-nx]

Questions to answer, and things to consider, during this POC:

• Can we support different bundle paths? e.g. "/etc/app_protect/bundles/cafe/policy-cafe.tgz"?
• Can we reject an Ingress resource where the namespace of that Ingress resource is not found in the bundle path?
• Can we add logic to add one nested directory in /etc/app_protect/bundles/?
• Should the full path be in the annotation?

Additional resources:
https://docs.nginx.com/nginx-app-protect-waf/v5/admin-guide/deploy-on-kubernetes/#using-compiled-policy-and-logging-profile-bundles-in-nginx

https://docs.nginx.com/nginx-app-protect-waf/v5/admin-guide/deploy-on-docker/#using-policy-and-logging-profile-bundles

#6641 (comment)

[github-actions]

Hi @shaun-nx thanks for reporting!

Be sure to check out the docs and the Contributing Guidelines while you wait for a human to take a look at this 🙂

Cheers!