Ability to check network policies syntax using calicoctl dry-run

[hahasheminejad]

Expected Behavior

Just wondering if a --dry-run option or anything similar is available for networkpolicy and globalnetworkpolicy kinds to check the validity of policies before applying.

The idea is to have a step in our pipeline for each PR to check the syntax/validity of rules before applying to the cluster.

Current Behavior

Possible Solution

Having --dry-run option for network policies.

Steps to Reproduce (for bugs)

Context

Your Environment

• calicoctl version (e.g. calicoctl version):
• calico/node version (e.g. docker run --rm calico/node versions)
• Orchestrator type and version (e.g. kubernetes, mesos, rkt):
• Operating System and version:
• Link to your project (optional):

[caseydavenport]

This is a neat idea. I don't think we have anything like that right now, but a --dry-run or a --validate option would be really useful.

[nuxeric]

I am looking into taking this on and trying to contribute! I am not entirely sure if this is the right process but I thought I would document that I am looking into this issue! :D

[der-ali]

+1