LDAP is not working for Nexus behind istio

Related to #1115 (closed).

I have deployed Bigbang Release 1.25.1. I have a LDAP server (FreeIPA) outside of the kubernetes cluster. I am trying to setup LDAP integration for Nexus. But I am running into this issue when trying to apply network policy to open up ports(636) using this.

addons:
  nexus:
    postRenderers:
      - kustomize:
          patchesStrategicMerge:
            - kind: NetworkPolicy
              apiVersion: networking.k8s.io/v1
              metadata:
                name: allow-https-egress
                namespace: nexus-repository-manager
              spec:
                egress:
                - ports:
                  - port: 443
                    protocol: TCP
                - ports:
                  - port: 636
                    protocol: TCP

@ryan.j.garcia @kevin.wilder I'd appreciate your help with this

changed the description

Nexus does not have a NetworkPolicy named "allow-https-egress". So your postrender is failing with "no matches".

In this case you can create your own networkpolicy and use kustomize to deploy it

apiVersion: networking.k8s.io/v1
kind: NetworkPolicy
metadata:
  name: egress-ldap
  namespace: nexus-repository-manager
spec:
  podSelector: 
    matchLabels:
      app.kubernetes.io/name: nexus-repository-manager
  policyTypes:
  - Egress
  egress:
  - ports:
    - port: 636
      protocol: TCP

Or, disable networkpolicies for Nexus

Hi @kevin.wilder. I know this issue is closed but how do i used to kustomize to create this policy. is there an example or syntax that i can use as a reference?

That would make sense. Thanks Kevin for your response. Closing the issue

closed

mentioned in issue #1143 (closed)