UNCLASSIFIED - NO CUI

Added new to pull in bb-common specific values and updated a few templates to use the new approach

General MR

Summary

  • Added new bb-common related helper to help reduce code redundancy
  • Tightened scope of mergeLegacyIstioHardened
  • Removed logic used for custom ports for Postgres/Redis and associated tests from Gitlab template

Relevant logs/screenshots

Common is now used only for bb-common related settings as shown below:

kubectl get secrets -n bigbang bigbang-cert-manager-values -o yaml | yq .data.common | base64 -d

bb-common:
  istio:
    ambient:
      enabled: false
    authorizationPolicies:
      enabled: true
      generateFromNetpol: true
    enabled: true
    sidecar:
      enabled: true
  networkPolicies:
    egress:
      definitions:
        database-subnets:
          ports:
          - port: 5432
            protocol: TCP
          to:
          - ipBlock:
              cidr: 192.168.0.0/16
          - ipBlock:
              cidr: 172.16.0.0/12
          - ipBlock:
              cidr: 10.0.0.0/8
        kafka-subnets:
          ports:
          - port: 9092
            protocol: TCP
          - port: 9093
            protocol: TCP
          to:
          - ipBlock:
              cidr: 0.0.0.0/0
        redis-subnets:
          ports:
          - port: 6379
            protocol: TCP
          to:
          - ipBlock:
              cidr: 192.168.0.0/16
          - ipBlock:
              cidr: 172.16.0.0/12
          - ipBlock:
              cidr: 10.0.0.0/8
        sso:
          to:
          - ipBlock:
              cidr: 0.0.0.0/0
        storage-subnets:
          ports:
          - port: 443
            protocol: TCP
          to:
          - ipBlock:
              cidr: 0.0.0.0/0
    enabled: true
    hbonePortInjection:
      enabled: false
    ingress:
      definitions:
        kubeAPI:
          from:
          - ipBlock:
              cidr: 192.168.0.0/16
          - ipBlock:
              cidr: 172.16.0.0/12
          - ipBlock:
              cidr: 10.0.0.0/8
        load-balancer-subnets:
          from:
          - ipBlock:
              cidr: 192.168.0.0/16
          - ipBlock:
              cidr: 172.16.0.0/12
          - ipBlock:
              cidr: 10.0.0.0/8

Linked Issue

issue

Upgrade Notices

N/A

Edited by Jimmy Bourque

Merge request reports

Loading