[RS-2546] Update operator to deploy waf-http-filter in Enterprise

[LorcanMcVeigh]

Description

This PR updates the operator to deploy waf-http-filter in Enterprise when enabling the Gateway API.

This will setup the required waf-http-filter sidecar container in the envoy-proxy deployment, but envoy won't be configured to use it by default. To do so, the user will need to create a separate EnvoyExtensionPolicy to enable the filter and protect the traffic with WAF.

Release Note

Deploy the WAF HTTP Filter alongside the Envoy Proxy when running in Calico Enterprise.

For PR author

• Tests for change.
• If changing pkg/apis/, run make gen-files
• If changing versions, run make gen-versions

For PR reviewers

A note for code reviewers - all pull requests must have the following:

• Milestone set according to targeted release.
• Appropriate labels:
  • kind/bug if this is a bugfix.
  • kind/enhancement if this is a a new feature.
  • enterprise if this PR applies to Calico Enterprise only.

[tmjd]

Thanks for making updates based on my comments in the other PR #4008 (review)

WDYT about adding a unit test for the overwriting of those fields?

[LorcanMcVeigh]

The unit tests check the values of those fields once WAF is deployed already. So the existing tests cover that use case