ci: conflist generation and steps for cilium swiftv2

[QxBytes]

Reason for Change:

Adds John's conflist generation changes to CNS (currently unused).
Adds swiftv2 cilium instructions and related files for watcher.
Adds sample chained cni conflist which should now be bundled into dropgz.

test/integration/manifests/cilium/watcher/deployment-alt-healthz-port.yaml and test/integration/manifests/cni/conflist-installer-byon.yaml are identical except one specifies a healthz port.

Conflist installer uses acnpublic image but for correctness this particular image has the chained conflist we want.
acnpublic.azurecr.io/public/containernetworking/azure-cni:v1.7.5-3

Watcher relies on an image that has kubectl and yq.

Issue Fixed:

Requirements:

• uses conventional commit messages
• includes documentation
• adds unit tests
• relevant PR labels added

Notes:

[QxBytes]

/azp run Azure Container Networking PR

[azure-pipelines]

Azure Pipelines successfully started running 1 pipeline(s).

[Copilot]

Pull request overview

Adds support files and plumbing for an Azure CNI chained-with-Cilium conflist scenario (and related Swiftv2 unmanaged-node setup), including CNS conflist generation + fixtures/tests, and bundling the sample conflist into the CNI payload.

Changes:

• Add a new CNS conflist generation scenario (azurecni-chained-cilium) with Linux generator + fixtures + unit test.
• Add Swiftv2 Cilium “watcher” deployment manifests (including an alternate healthz-port variant) and BYON conflist installer manifest.
• Bundle azure-chained-cilium.conflist into the CNI dropgz payload and pipeline build outputs, plus add a setup guide.

Reviewed changes

Copilot reviewed 15 out of 15 changed files in this pull request and generated 7 comments.

Show a summary per file

File	Description
test/integration/manifests/cnsconfig/azcnichainedciliumconfigmap.yaml	Adds CNS config for chained Cilium conflist generation scenario.
test/integration/manifests/cni/conflist-installer-byon.yaml	Adds DaemonSet manifest to install chained conflist onto BYON nodes.
test/integration/manifests/cilium/watcher/deployment.yaml	Adds watcher deployment to clone/modify managed Cilium DaemonSet for unmanaged nodes.
test/integration/manifests/cilium/watcher/deployment-alt-healthz-port.yaml	Variant watcher manifest that sets alternate healthz bind port for kube-proxy coexistence.
docs/feature/swift-v2/setup-guide-cil.md	Adds Swiftv2 managed Cilium setup instructions for BYON/unmanaged nodes.
cns/service/main.go	Wires new conflist scenario string to a new generator.
cns/cniconflist/testdata/fixtures/azure-chained-cilium.conflist	Adds fixture used to validate generated chained conflist output.
cns/cniconflist/generator_windows.go	Adds Windows stub for the new generator (not implemented).
cns/cniconflist/generator_linux_test.go	Switches to require and adds a test for the new generator.
cns/cniconflist/generator_linux.go	Implements the chained AzureCNI→Cilium conflist generator.
cns/cniconflist/generator.go	Adds generator type + Close() implementation.
cni/azure-chained-cilium.conflist	Adds sample chained conflist intended for packaging/installation.
cni/Dockerfile.tmpl	Includes chained conflist in payload build.
cni/Dockerfile	Includes chained conflist in payload build.
.pipelines/build/scripts/cni.sh	Copies chained conflist into pipeline output files.

[Copilot]

Pull request overview

Copilot reviewed 15 out of 15 changed files in this pull request and generated 6 comments.

[tamilmani1989]

can you include mcr image instead of acnpublic.. why are we asking them to replace?

[QxBytes]

Currently there isn't any mcr image available that has the chained cni conflist. This is the PR where it is introduced and added to dropgz/azure-cni.