diff --git a/chart/templates/neuvector/values.yaml b/chart/templates/neuvector/values.yaml index e4c656ecf225b6d0973a884e4e219c6dbd9a30ac..e03d397ca4892b4f3a1f67aab0883284621536c9 100644 --- a/chart/templates/neuvector/values.yaml +++ b/chart/templates/neuvector/values.yaml @@ -4,11 +4,15 @@ # hostname is deprecated and replaced with domain. But if hostname exists then use it. domain: {{ default .Values.domain .Values.hostname }} + +openshift: {{ .Values.openshift }} + istio: enabled: {{ .Values.istio.enabled }} neuvector: gateways: - istio-system/{{ default "public" .Values.neuvector.ingress.gateway }} + {{- if .Values.monitoring.enabled }} monitoring: enabled: true @@ -41,11 +45,21 @@ monitor: CTRL_PASSWORD: {{ $neuvectorMetricsPass }} {{- end }} +{{- if .Values.istio.enabled }} manager: env: ssl: false {{- end }} +networkPolicies: + enabled: {{ .Values.networkPolicies.enabled }} + controlPlaneCidr: {{ .Values.networkPolicies.controlPlaneCidr }} + ingressLabels: + {{- $gateway := default "public" .Values.neuvector.ingress.gateway }} + {{- $default := dict "app" (dig "gateways" $gateway "ingressGateway" nil .Values.istio) "istio" nil }} + {{- toYaml (dig "values" "gateways" $gateway "selector" $default .Values.istio) | nindent 4 }} +{{- end }} + {{- /* Create secret */ -}} {{- if .Values.neuvector.enabled }} {{- include "values-secret" (dict "root" $ "package" .Values.neuvector "name" "neuvector" "defaults" (include "bigbang.defaults.neuvector" .)) }} diff --git a/chart/values.yaml b/chart/values.yaml index 8d414fa5bdb7ac957abe66e4dcd929c2c97af2ce..c16519815663303451784c6adaf3d9a99f860841 100644 --- a/chart/values.yaml +++ b/chart/values.yaml @@ -590,7 +590,7 @@ neuvector: git: repo: https://repo1.dso.mil/platform-one/big-bang/apps/sandbox/neuvector.git path: "./chart" - tag: "2.4.0-bb.4" + tag: "2.4.0-bb.5" # -- Redirect the package ingress to a specific Istio Gateway (listed in `istio.gateways`). The default is "public". ingress: diff --git a/docs/packages.md b/docs/packages.md index f29f8371d3ebe5228c3ed4a47d75766dd6d80a12..fc9cbe48f791e4693bd0a4719861fa767e54af77 100644 --- a/docs/packages.md +++ b/docs/packages.md @@ -22,7 +22,7 @@ | [Jaeger](https://repo1.dso.mil/big-bang/apps/core/jaeger) |  | Yes | Yes | [Yes](https://repo1.dso.mil/big-bang/bigbang/-/merge_requests/602) | [Yes (STRICT)](https://repo1.dso.mil/big-bang/bigbang/-/merge_requests/1295) | | [Kiali](https://repo1.dso.mil/big-bang/apps/core/kiali) |  | No | Yes | [Yes](https://repo1.dso.mil/big-bang/bigbang/-/merge_requests/589) | [Yes (STRICT)](https://repo1.dso.mil/big-bang/bigbang/-/merge_requests/1296) | | [Monitoring](https://repo1.dso.mil/big-bang/apps/core/monitoring) |  | Yes | Yes | [Yes](https://repo1.dso.mil/big-bang/bigbang/-/merge_requests/509) | [Yes (STRICT)](https://repo1.dso.mil/big-bang/bigbang/-/merge_requests/1900) | -| [NeuVector](https://repo1.dso.mil/big-bang/apps/sandbox/neuvector)  |  | Yes | No | Yes | [Yes (STRICT)](https://repo1.dso.mil/big-bang/apps/sandbox/neuvector/-/blob/main/chart/templates/bigbang/peerauthentication/peerauthentication/peer-authentication.yaml) | +| [NeuVector](https://repo1.dso.mil/big-bang/apps/sandbox/neuvector)  |  | Yes | No | [Yes](https://repo1.dso.mil/big-bang/bigbang/-/merge_requests/2486) | [Yes (STRICT)](https://repo1.dso.mil/big-bang/apps/sandbox/neuvector/-/blob/main/chart/templates/bigbang/peerauthentication/peerauthentication/peer-authentication.yaml) | | [Twistlock](https://repo1.dso.mil/big-bang/apps/security-tools/twistlock) |  | Yes | Yes | [Yes](https://repo1.dso.mil/big-bang/bigbang/-/merge_requests/498) | [Yes (STRICT)](https://repo1.dso.mil/big-bang/bigbang/-/merge_requests/1396) | | [ECK Operator](https://repo1.dso.mil/big-bang/apps/core/eck-operator) |  | No | Yes | [Yes](https://repo1.dso.mil/big-bang/bigbang/-/merge_requests/510) | [Yes (STRICT)](https://repo1.dso.mil/big-bang/bigbang/-/merge_requests/1236) | | [Elasticsearch Kibana](https://repo1.dso.mil/big-bang/apps/core/elasticsearch-kibana) |  | Yes | Yes | [Yes](https://repo1.dso.mil/big-bang/bigbang/-/merge_requests/527) | [Yes (STRICT)](https://repo1.dso.mil/big-bang/bigbang/-/merge_requests/1537) |