Add seLinuxChangePolicy field to Fabric chaincode CRD and remove Profile field from enrollment requests in multiple controllers (#270)

- Introduced a new `seLinuxChangePolicy` field in the Fabric chaincode CRD to enhance security configurations.
- Removed the `Profile` field from enrollment request functions in the identity, ordnode, and peer controllers to streamline the request structure.

These changes improve the configuration options for chaincode and simplify the enrollment process across controllers.

Signed-off-by: David VIEJO <[email protected]>

Author: dviejokfs

config/crd/bases/hlf.kungfusoftware.es_fabricchaincodes.yaml

@@ -815,6 +815,8 @@ spec:
                   runAsUser:
                     format: int64
                     type: integer
+                  seLinuxChangePolicy:
+                    type: string
                   seLinuxOptions:
                     properties:
                       level:

controllers/identity/identity_controller.go

@@ -439,7 +439,6 @@ func getEnrollRequestForFabricCA(client *kubernetes.Clientset, conf *hlfv1alpha1
 	return certs.EnrollUserRequest{
 		Hosts:      []string{},
 		CN:         "",
-		Profile:    conf.Spec.Caname,
 		Attributes: nil,
 		User:       conf.Spec.Enrollid,
 		Secret:     conf.Spec.Enrollsecret,
@@ -510,7 +509,6 @@ func getReenrollRequestForFabricCA(client *kubernetes.Clientset, conf *hlfv1alph
 		TLSCert:  string(cacert),
 		Hosts:    []string{},
 		CN:       "",
-		Profile:  profile,
 		URL:      tlsCAUrl,
 		Name:     conf.Spec.Caname,
 		EnrollID: conf.Spec.Enrollid,

controllers/ordnode/ordnode_controller.go

@@ -1547,7 +1547,6 @@ func getEnrollRequestForFabricCATLS(client *kubernetes.Clientset, enrollment *hl
 	return certs.EnrollUserRequest{
 		Hosts:      hosts,
 		CN:         enrollment.Enrollid,
-		Profile:    profile,
 		Attributes: nil,
 		User:       enrollment.Enrollid,
 		Secret:     enrollment.Enrollsecret,
@@ -1603,7 +1602,6 @@ func getReenrollRequestForFabricCA(client *kubernetes.Clientset, enrollment *hlf
 		TLSCert:  string(cacert),
 		Hosts:    []string{},
 		CN:       "",
-		Profile:  profile,
 		URL:      tlsCAUrl,
 		Name:     enrollment.Caname,
 		EnrollID: enrollment.Enrollid,
@@ -1636,7 +1634,6 @@ func getReenrollRequestForFabricCATLS(client *kubernetes.Clientset, enrollment *
 		TLSCert:  string(cacert),
 		Hosts:    hosts,
 		CN:       "",
-		Profile:  profile,
 		URL:      tlsCAUrl,
 		Name:     enrollment.Caname,
 		EnrollID: enrollment.Enrollid,

controllers/peer/peer_controller.go

@@ -862,7 +862,6 @@ func getEnrollRequestForFabricCA(client *kubernetes.Clientset, enrollment *hlfv1
 	return certs.EnrollUserRequest{
 		Hosts:      []string{},
 		CN:         conf.Name,
-		Profile:    profile,
 		Attributes: nil,
 		User:       enrollment.Enrollid,
 		Secret:     enrollment.Enrollsecret,
@@ -886,7 +885,6 @@ func getEnrollRequestForFabricCATLS(client *kubernetes.Clientset, enrollment *hl
 	return certs.EnrollUserRequest{
 		Hosts:      hosts,
 		CN:         enrollment.Enrollid,
-		Profile:    profile,
 		Attributes: nil,
 		User:       enrollment.Enrollid,
 		Secret:     enrollment.Enrollsecret,
@@ -1026,7 +1024,6 @@ func getReenrollRequestForFabricCA(client *kubernetes.Clientset, enrollment *hlf
 		TLSCert:  string(cacert),
 		Hosts:    []string{},
 		CN:       "",
-		Profile:  profile,
 		URL:      tlsCAUrl,
 		Name:     enrollment.Caname,
 		EnrollID: enrollment.Enrollid,
@@ -1049,7 +1046,6 @@ func getReenrollRequestForFabricCATLS(client *kubernetes.Clientset, enrollment *
 		TLSCert:  string(cacert),
 		Hosts:    hosts,
 		CN:       "",
-		Profile:  profile,
 		URL:      tlsCAUrl,
 		Name:     enrollment.Caname,
 		EnrollID: enrollment.Enrollid,