Implement PolicyAffected Status for NGF Policies

[kate-osborn]

As an HTTPRoute or Gateway owner
I want to know when my object is affected by an NGF policy
So that I know that the policy has taken effect.

Acceptance

• Add and document the Condition type gateway.nginx.org/ClientSettingsPolicyAffected, gateway.nginx.org/ObservabilityPolicyAffected, and 'gateway.nginx.org/Waf/WAFPolicyAffected'
• Set this Condition on all HTTPRoutes and Gateways affected by a ClientSettingPolicy or ObservabilityPolicy.
• If an object is affected by multiple ClientSettingsPolicy, only one gateway.nginx.org/ClientSettingsPolicyAffected should exist. (same for ObservabilityPolicy)
• When the last policy affecting that object is removed, the Condition should be removed.
• The Observed Generation is the generation of the affected object, not the generation of the policy.

[sjberman]

This also needs to work for the ObservabilityPolicy. Ideally our policy logic is general enough that it will apply everywhere.

[salonichf5]

This also needs to work for the ObservabilityPolicy. Ideally our policy logic is general enough that it will apply everywhere.

Confirming that we need to add another field letting us know if ObservabilityPolicyAffected has been applied to that resource?

Also, when a PolicyAffected is added to the Conditions of a resource, it will specify the name of the Policy, be it observability or client settings? or just true or false?

[sjberman]

Requirements are defined here by the spec and here by our design.

Just the message should have the context as to which policy is attached.