Merge pull request #74520 from JoeAldinger/OSDOCS-10217

OSDOCS-10217:adds OVN-K ACL diagram

Author: JoeAldinger

images/615_OpenShift_OVN-K_ACLs_0324.png

@@ -17,7 +17,9 @@ OVN-Kubernetes CNI in {product-title} implements these network policies using Ac
 
 Tier 1 evaluates `AdminNetworkPolicy` (ANP) objects. Tier 2 evaluates `NetworkPolicy` objects. Tier 3 evaluates `BaselineAdminNetworkPolicy` (BANP) objects.
 
-// <image here to help describe ACLs>
+.OVK-Kubernetes Access Control List (ACL)
+
+image::615_OpenShift_OVN-K_ACLs_0324.png[OVN-Kubernetes Access Control List]
 
 If traffic matches an ANP rule, the rules in that ANP will be evaluated first. If the match is an ANP `allow` or `deny` rule, any existing `NetworkPolicies` and `BaselineAdminNetworkPolicy` (BANP) in the cluster will be intentionally skipped from evaluation. If the match is an ANP `pass` rule, then evaluation moves from tier 1 of the ACLs to tier 2 where the `NetworkPolicy` policy is evaluated.