chore: add policy CI job back

Signed-off-by: Matt Kornfield <mkornfield@nvidia.com>

Author: mckornfield

.github/workflows/ci.yaml

@@ -648,6 +648,78 @@ jobs:
           artifact-name: kind-gym-e2e-kubernetes-artifacts
           junit-report: report-kubernetes-gym-e2e.xml
           services-log-dir: ${{ runner.temp }}/e2e-services-logs
+  
+  kind-network-policy-smoke:
+    name: Kind NetworkPolicy smoke
+    needs: [changes, build-cpu-smoke-images]
+    if: >
+      !cancelled() &&
+      needs.build-cpu-smoke-images.result == 'success' &&
+      needs.build-cpu-smoke-images.outputs.publish_images == 'true' && (
+        github.event_name == 'workflow_dispatch' ||
+        needs.changes.outputs.helm == 'true' ||
+        needs.changes.outputs.e2e == 'true'
+      )
+    runs-on: ubuntu-latest
+    timeout-minutes: 45
+    permissions:
+      contents: read
+      packages: read
+    env:
+      KIND_CLUSTER_NAME: gha-${{ github.run_id }}-${{ github.run_attempt }}-network-policy
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+        with:
+          persist-credentials: false
+
+      - name: Setup Kind cluster with NetworkPolicy enforcement
+        uses: ./.github/actions/setup-kind-cluster
+        with:
+          kind-cluster-name: ${{ env.KIND_CLUSTER_NAME }}
+          image-registry: ${{ needs.build-cpu-smoke-images.outputs.image_registry }}
+          image-tag: ${{ needs.build-cpu-smoke-images.outputs.image_tag }}
+          kind-image-pull-token: ${{ github.token }}
+          kind-image-pull-user: ${{ github.actor }}
+          kind-enable-gateway: "false"
+          kind-enable-network-policies: "true"
+          helm-extra-args: -f e2e/k8s/values/network-policies.yaml
+          wait-for-api: "false"
+
+      - name: Run NetworkPolicy smoke test
+        shell: bash
+        env:
+          NAMESPACE: nemo-platform
+          CHAINSAW_REPORT_FORMAT: XML
+          CHAINSAW_REPORT_NAME: report-network-policy-smoke
+          CHAINSAW_REPORT_PATH: .
+        run: |
+          if e2e/k8s/scripts/test_network_policies.sh; then
+            if [ ! -f report-network-policy-smoke.xml ]; then
+              printf '<testsuite name="network-policy-smoke" tests="1" failures="0"/>%s' $'\n' > report-network-policy-smoke.xml
+            fi
+            exit 0
+          fi
+          status="$?"
+          if [ ! -f report-network-policy-smoke.xml ]; then
+            cat > report-network-policy-smoke.xml <<'EOF'
+          <testsuite name="network-policy-smoke" tests="1" failures="1">
+            <testcase name="network-policy-smoke">
+              <failure message="network policy smoke test failed">See the workflow log and Kubernetes artifact bundle.</failure>
+            </testcase>
+          </testsuite>
+          EOF
+          fi
+          exit "${status}"
+
+      - name: Finalize Kind e2e
+        if: always()
+        uses: ./.github/actions/finalize-kind-e2e
+        with:
+          kind-cluster-name: ${{ env.KIND_CLUSTER_NAME }}
+          artifact-name: kind-network-policy-smoke-artifacts
+          junit-report: report-network-policy-smoke.xml
+          services-log-dir: ${{ runner.temp }}/e2e-services-logs
 
   helm-lint:
     name: Helm lint
@@ -2110,6 +2182,7 @@ jobs:
       - build-cpu-smoke-images
       - kind-cpu-smoke
       - kind-gym-e2e
+      - kind-network-policy-smoke
       - helm-lint
       - helm-chart-verifier
       - lint