Add service account selector support (antrea-io#3044)

Fixes antrea-io#2927

This PR added `serviceAccount` field support to ACNP. It uses
Namespace and Name to specify a ServiceAccount and all Pods with this
ServiceAccount will be selected as workloads. It could be used in
egress `to`, ingress `from` and `appliedTo` of both policy and single
rule. To implement this feature, this PR also added a custom label to
all Pods internally, which looks like:
`internal.antrea.io/service-account:[ServiceAccountName]`. And when
process ACNP, `serviceAccount` will be translate to a `GroupSelector`
with `Namespace` and `PodSelector` to select Pods we need.

Signed-off-by: wgrayson <wgrayson@vmware.com>

build/yamls/antrea-aks.yml

@@ -468,6 +468,16 @@ spec:
                         matchLabels:
                           x-kubernetes-preserve-unknown-fields: true
                       type: object
+                    serviceAccount:
+                      properties:
+                        name:
+                          type: string
+                        namespace:
+                          type: string
+                      required:
+                      - name
+                      - namespace
+                      type: object
                   type: object
                 type: array
               egress:
@@ -533,6 +543,16 @@ spec:
                               matchLabels:
                                 x-kubernetes-preserve-unknown-fields: true
                             type: object
+                          serviceAccount:
+                            properties:
+                              name:
+                                type: string
+                              namespace:
+                                type: string
+                            required:
+                            - name
+                            - namespace
+                            type: object
                         type: object
                       type: array
                     enableLogging:
@@ -616,6 +636,16 @@ spec:
                               matchLabels:
                                 x-kubernetes-preserve-unknown-fields: true
                             type: object
+                          serviceAccount:
+                            properties:
+                              name:
+                                type: string
+                              namespace:
+                                type: string
+                            required:
+                            - name
+                            - namespace
+                            type: object
                         type: object
                       type: array
                     toServices:
@@ -697,6 +727,16 @@ spec:
                               matchLabels:
                                 x-kubernetes-preserve-unknown-fields: true
                             type: object
+                          serviceAccount:
+                            properties:
+                              name:
+                                type: string
+                              namespace:
+                                type: string
+                            required:
+                            - name
+                            - namespace
+                            type: object
                         type: object
                       type: array
                     enableLogging:
@@ -767,6 +807,16 @@ spec:
                               matchLabels:
                                 x-kubernetes-preserve-unknown-fields: true
                             type: object
+                          serviceAccount:
+                            properties:
+                              name:
+                                type: string
+                              namespace:
+                                type: string
+                            required:
+                            - name
+                            - namespace
+                            type: object
                         type: object
                       type: array
                     name:

build/yamls/antrea-eks.yml

@@ -468,6 +468,16 @@ spec:
                         matchLabels:
                           x-kubernetes-preserve-unknown-fields: true
                       type: object
+                    serviceAccount:
+                      properties:
+                        name:
+                          type: string
+                        namespace:
+                          type: string
+                      required:
+                      - name
+                      - namespace
+                      type: object
                   type: object
                 type: array
               egress:
@@ -533,6 +543,16 @@ spec:
                               matchLabels:
                                 x-kubernetes-preserve-unknown-fields: true
                             type: object
+                          serviceAccount:
+                            properties:
+                              name:
+                                type: string
+                              namespace:
+                                type: string
+                            required:
+                            - name
+                            - namespace
+                            type: object
                         type: object
                       type: array
                     enableLogging:
@@ -616,6 +636,16 @@ spec:
                               matchLabels:
                                 x-kubernetes-preserve-unknown-fields: true
                             type: object
+                          serviceAccount:
+                            properties:
+                              name:
+                                type: string
+                              namespace:
+                                type: string
+                            required:
+                            - name
+                            - namespace
+                            type: object
                         type: object
                       type: array
                     toServices:
@@ -697,6 +727,16 @@ spec:
                               matchLabels:
                                 x-kubernetes-preserve-unknown-fields: true
                             type: object
+                          serviceAccount:
+                            properties:
+                              name:
+                                type: string
+                              namespace:
+                                type: string
+                            required:
+                            - name
+                            - namespace
+                            type: object
                         type: object
                       type: array
                     enableLogging:
@@ -767,6 +807,16 @@ spec:
                               matchLabels:
                                 x-kubernetes-preserve-unknown-fields: true
                             type: object
+                          serviceAccount:
+                            properties:
+                              name:
+                                type: string
+                              namespace:
+                                type: string
+                            required:
+                            - name
+                            - namespace
+                            type: object
                         type: object
                       type: array
                     name:

build/yamls/antrea-gke.yml

@@ -468,6 +468,16 @@ spec:
                         matchLabels:
                           x-kubernetes-preserve-unknown-fields: true
                       type: object
+                    serviceAccount:
+                      properties:
+                        name:
+                          type: string
+                        namespace:
+                          type: string
+                      required:
+                      - name
+                      - namespace
+                      type: object
                   type: object
                 type: array
               egress:
@@ -533,6 +543,16 @@ spec:
                               matchLabels:
                                 x-kubernetes-preserve-unknown-fields: true
                             type: object
+                          serviceAccount:
+                            properties:
+                              name:
+                                type: string
+                              namespace:
+                                type: string
+                            required:
+                            - name
+                            - namespace
+                            type: object
                         type: object
                       type: array
                     enableLogging:
@@ -616,6 +636,16 @@ spec:
                               matchLabels:
                                 x-kubernetes-preserve-unknown-fields: true
                             type: object
+                          serviceAccount:
+                            properties:
+                              name:
+                                type: string
+                              namespace:
+                                type: string
+                            required:
+                            - name
+                            - namespace
+                            type: object
                         type: object
                       type: array
                     toServices:
@@ -697,6 +727,16 @@ spec:
                               matchLabels:
                                 x-kubernetes-preserve-unknown-fields: true
                             type: object
+                          serviceAccount:
+                            properties:
+                              name:
+                                type: string
+                              namespace:
+                                type: string
+                            required:
+                            - name
+                            - namespace
+                            type: object
                         type: object
                       type: array
                     enableLogging:
@@ -767,6 +807,16 @@ spec:
                               matchLabels:
                                 x-kubernetes-preserve-unknown-fields: true
                             type: object
+                          serviceAccount:
+                            properties:
+                              name:
+                                type: string
+                              namespace:
+                                type: string
+                            required:
+                            - name
+                            - namespace
+                            type: object
                         type: object
                       type: array
                     name:

build/yamls/antrea-ipsec.yml

@@ -468,6 +468,16 @@ spec:
                         matchLabels:
                           x-kubernetes-preserve-unknown-fields: true
                       type: object
+                    serviceAccount:
+                      properties:
+                        name:
+                          type: string
+                        namespace:
+                          type: string
+                      required:
+                      - name
+                      - namespace
+                      type: object
                   type: object
                 type: array
               egress:
@@ -533,6 +543,16 @@ spec:
                               matchLabels:
                                 x-kubernetes-preserve-unknown-fields: true
                             type: object
+                          serviceAccount:
+                            properties:
+                              name:
+                                type: string
+                              namespace:
+                                type: string
+                            required:
+                            - name
+                            - namespace
+                            type: object
                         type: object
                       type: array
                     enableLogging:
@@ -616,6 +636,16 @@ spec:
                               matchLabels:
                                 x-kubernetes-preserve-unknown-fields: true
                             type: object
+                          serviceAccount:
+                            properties:
+                              name:
+                                type: string
+                              namespace:
+                                type: string
+                            required:
+                            - name
+                            - namespace
+                            type: object
                         type: object
                       type: array
                     toServices:
@@ -697,6 +727,16 @@ spec:
                               matchLabels:
                                 x-kubernetes-preserve-unknown-fields: true
                             type: object
+                          serviceAccount:
+                            properties:
+                              name:
+                                type: string
+                              namespace:
+                                type: string
+                            required:
+                            - name
+                            - namespace
+                            type: object
                         type: object
                       type: array
                     enableLogging:
@@ -767,6 +807,16 @@ spec:
                               matchLabels:
                                 x-kubernetes-preserve-unknown-fields: true
                             type: object
+                          serviceAccount:
+                            properties:
+                              name:
+                                type: string
+                              namespace:
+                                type: string
+                            required:
+                            - name
+                            - namespace
+                            type: object
                         type: object
                       type: array
                     name: