kvm2: integration test, sample Proxy, providers-config entries and Makefile target

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>

config/manager/manager.yaml

@@ -149,9 +149,10 @@ spec:
         - name: providers-config
           mountPath: /etc/proxy-operator
           readOnly: true
-        # SSH material for kvm providers (sshKeyFile / knownHostsFile in the
-        # providers config point here). Optional: the mount is empty when the
-        # Secret does not exist, and only kvm entries need it. Create it with:
+        # SSH material for the kvm and kvm2 providers (sshKeyFile /
+        # knownHostsFile in the providers config point here). One Secret
+        # serves both types. Optional: the mount is empty when the Secret
+        # does not exist, and only kvm and kvm2 entries need it. Create it with:
         #   kubectl -n egress-proxies-operator-system create secret generic kvm-ssh \
         #     --from-file=id_ed25519=<private key> \
         #     --from-file=known_hosts=<known_hosts with every host's key>
@@ -167,6 +168,7 @@ spec:
       - name: providers-config
         configMap:
           name: providers-config
+      # Shared by the kvm and kvm2 providers; see the mount above.
       - name: kvm-ssh
         secret:
           secretName: kvm-ssh

config/manager/providers_config.yaml

@@ -51,4 +51,35 @@ data:
               bridge: br0                 # to a LAN with DHCP; the VM's IP comes from there
               # socket: /var/run/libvirt/libvirt-sock
               # pool: default
+      # kvm2 takes the same block shape as kvm: an entry ports by changing
+      # type to kvm2 and the block name to kvm2. kvm2 does not adopt domains
+      # made by kvm, so delete those Proxies first. See docs/kvm2-provider.md.
+      # - name: kvm2-home
+      #   type: kvm2
+      #   kvm2:
+      #     sshKeyFile: /etc/proxy-operator/kvm/id_ed25519
+      #     knownHostsFile: /etc/proxy-operator/kvm/known_hosts
+      #     # insecureIgnoreHostKey: true
+      #     # diskSizeGb: 10
+      #     # installGuestAgent: false
+      #     # vendorData: |
+      #     #   #cloud-config
+      #     #   ...
+      #     images:
+      #       debian-13:
+      #         url: https://cloud.debian.org/images/cloud/trixie/latest/debian-13-generic-amd64.qcow2
+      #         # sha256: "<64 hex>"
+      #         # firmware: uefi
+      #       ubuntu-24.04:
+      #         url: https://cloud-images.ubuntu.com/noble/current/noble-server-cloudimg-amd64.img
+      #     machineTypes:
+      #       small:  {vcpus: 1, memoryMiB: 1024}
+      #       medium: {vcpus: 2, memoryMiB: 2048}
+      #     hosts:
+      #       - name: beelink
+      #         address: beelink.tail8c69c.ts.net:22
+      #         user: novakj
+      #         bridge: br0
+      #         # socket: /var/run/libvirt/libvirt-sock
+      #         # pool: default