Added new to pull in bb-common specific values and updated a few templates to use the new approach
General MR
Summary
- Added new bb-common related helper to help reduce code redundancy
- Tightened scope of mergeLegacyIstioHardened
- Removed logic used for custom ports for Postgres/Redis and associated tests from Gitlab template
Relevant logs/screenshots
Common is now used only for bb-common related settings as shown below:
kubectl get secrets -n bigbang bigbang-cert-manager-values -o yaml | yq .data.common | base64 -d
bb-common:
istio:
ambient:
enabled: false
authorizationPolicies:
enabled: true
generateFromNetpol: true
enabled: true
sidecar:
enabled: true
networkPolicies:
egress:
definitions:
database-subnets:
ports:
- port: 5432
protocol: TCP
to:
- ipBlock:
cidr: 192.168.0.0/16
- ipBlock:
cidr: 172.16.0.0/12
- ipBlock:
cidr: 10.0.0.0/8
kafka-subnets:
ports:
- port: 9092
protocol: TCP
- port: 9093
protocol: TCP
to:
- ipBlock:
cidr: 0.0.0.0/0
redis-subnets:
ports:
- port: 6379
protocol: TCP
to:
- ipBlock:
cidr: 192.168.0.0/16
- ipBlock:
cidr: 172.16.0.0/12
- ipBlock:
cidr: 10.0.0.0/8
sso:
to:
- ipBlock:
cidr: 0.0.0.0/0
storage-subnets:
ports:
- port: 443
protocol: TCP
to:
- ipBlock:
cidr: 0.0.0.0/0
enabled: true
hbonePortInjection:
enabled: false
ingress:
definitions:
kubeAPI:
from:
- ipBlock:
cidr: 192.168.0.0/16
- ipBlock:
cidr: 172.16.0.0/12
- ipBlock:
cidr: 10.0.0.0/8
load-balancer-subnets:
from:
- ipBlock:
cidr: 192.168.0.0/16
- ipBlock:
cidr: 172.16.0.0/12
- ipBlock:
cidr: 10.0.0.0/8Linked Issue
Upgrade Notices
N/A
Edited by Jimmy Bourque