fix: bugfix on rc16

Author: OisinKyne

internal/monetizeapi/types.go

@@ -64,6 +64,7 @@ var (
 	NamespaceGVR      = schema.GroupVersionResource{Group: "", Version: "v1", Resource: "namespaces"}
 	ServiceAccountGVR = schema.GroupVersionResource{Group: "", Version: "v1", Resource: "serviceaccounts"}
 	PVCGVR            = schema.GroupVersionResource{Group: "", Version: "v1", Resource: "persistentvolumeclaims"}
+	NetworkPolicyGVR  = schema.GroupVersionResource{Group: "networking.k8s.io", Version: "v1", Resource: "networkpolicies"}
 )
 
 // ── ServiceOffer ────────────────────────────────────────────────────────────

internal/serviceoffercontroller/agent.go

@@ -522,6 +522,8 @@ func (c *Controller) resourceFor(u *unstructured.Unstructured) dynamic.ResourceI
 		return c.client.Resource(monetizeapi.PVCGVR).Namespace(u.GetNamespace())
 	case "Deployment":
 		return c.deployments.Namespace(u.GetNamespace())
+	case "NetworkPolicy":
+		return c.client.Resource(monetizeapi.NetworkPolicyGVR).Namespace(u.GetNamespace())
 	default:
 		// Unknown kinds shouldn't reach this path — agentManifests is
 		// closed-set. Fall through to a sensible default so the eventual

internal/serviceoffercontroller/agent_test.go

@@ -202,6 +202,7 @@ func TestReconcileAgent_HappyPath_ProvisionsAndPins(t *testing.T) {
 		{"secrets", "agent-quant", "hermes-api-server"},
 		{"deployments", "agent-quant", "hermes"},
 		{"services", "agent-quant", "hermes"},
+		{"networkpolicies", "agent-quant", "agent-isolation"},
 	} {
 		if !resourceExists(t, c, kind.gvr, kind.ns, kind.name) {
 			t.Errorf("%s/%s/%s not applied", kind.gvr, kind.ns, kind.name)
@@ -426,6 +427,7 @@ func newProvisioningTestController(t *testing.T, agent *monetizeapi.Agent, seedO
 			monetizeapi.SecretGVR:         "SecretList",
 			monetizeapi.DeploymentGVR:     "DeploymentList",
 			monetizeapi.ServiceGVR:        "ServiceList",
+			monetizeapi.NetworkPolicyGVR:  "NetworkPolicyList",
 		},
 		objects...,
 	)
@@ -469,8 +471,11 @@ func litellmSecretObject(t *testing.T, masterKey string) *unstructured.Unstructu
 func resourceExists(t *testing.T, c *Controller, resource, namespace, name string) bool {
 	t.Helper()
 	gvr := schema.GroupVersionResource{Group: "", Version: "v1", Resource: resource}
-	if resource == "deployments" {
+	switch resource {
+	case "deployments":
 		gvr = schema.GroupVersionResource{Group: "apps", Version: "v1", Resource: resource}
+	case "networkpolicies":
+		gvr = schema.GroupVersionResource{Group: "networking.k8s.io", Version: "v1", Resource: resource}
 	}
 	dyn := c.dynClient.Resource(gvr)
 	if namespace != "" {