Update CRDs (tigera#4279)

Author: Josh-L

pkg/crds/calico/crd.projectcalico.org_tiers.yaml

@@ -34,6 +34,22 @@ spec:
                 order:
                   type: number
               type: object
+          required:
+            - metadata
+            - spec
           type: object
+          x-kubernetes-validations:
+            - message: The 'kube-admin' tier must have default action 'Pass'
+              rule:
+                "self.metadata.name == 'kube-admin' ? self.spec.defaultAction ==
+                'Pass' : true"
+            - message: The 'kube-baseline' tier must have default action 'Pass'
+              rule:
+                "self.metadata.name == 'kube-baseline' ? self.spec.defaultAction
+                == 'Pass' : true"
+            - message: The 'default' tier must have default action 'Deny'
+              rule:
+                "self.metadata.name == 'default' ? self.spec.defaultAction == 'Deny'
+                : true"
       served: true
       storage: true