Merge pull request #2692 from ormergi/ovn-k-cudn-localnet-ex-subnets-valid

OCPBUGS-55285: bindata,ovn-k,cudn: Validate loclanet topology's excludeSubnet match specified subnets

Author: openshift-merge-bot[bot]

bindata/network/ovn-kubernetes/common/001-crd.yaml

@@ -4032,6 +4032,11 @@ spec:
                         IPv6 subnet is used
                       rule: '!has(self.subnets) || !has(self.mtu) || !self.subnets.exists_one(i,
                         isCIDR(i) && cidr(i).ip().family() == 6) || self.mtu >= 1280'
+                    - fieldPath: .excludeSubnets
+                      message: excludeSubnets must be subnetworks of the networks
+                        specified in the subnets field
+                      rule: '!has(self.excludeSubnets) || self.excludeSubnets.all(e,
+                        self.subnets.exists(s, cidr(s).containsCIDR(cidr(e))))'
                   topology:
                     description: |-
                       Topology describes network configuration.