#95 : Add network policies via values file
General MR
Summary
Adds support to cluster-auditor for custom network policies via values yaml.
This depends on big-bang/bigbang!4184 (merged) for a documentation reference
Relevant logs/screenshots
Given these overrides:
clusterAuditor:
enabled: true
git:
repo: https://repo1.dso.mil/big-bang/product/packages/cluster-auditor.git
tag: null
path: chart
branch: "95_additional_network_policies"
values:
networkPolicies:
enabled: true
additionalPolicies:
- name: this-is-a-cluster-auditor-job-test-test
spec:
podSelector: {}
policyTypes:
- Egress
egress:
- to:
- ipBlock:
cidr: 172.20.0.0/12
- name: this-is-a-zwei-cluster-auditor-job-test-test
spec:
podSelector: {}
policyTypes:
- Ingress
ingress:
- from:
- ipBlock:
cidr: 172.20.0.0/12
.. We get network policies (new ones at the bottom):
NAME POD-SELECTOR AGE
egress-kube-api app.kubernetes.io/component=opa-exporter,app.kubernetes.io/instance=cluster-auditor-cluster-auditor,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=cluster-auditor,app.kubernetes.io/part-of=cluster-auditor,app.kubernetes.io/version=1.5.0-bb.16,helm.sh/chart=cluster-auditor-1.5.0-bb.16 2m9s
allow-helm-test-ingress-ca app.kubernetes.io/component=opa-exporter,app.kubernetes.io/instance=cluster-auditor-cluster-auditor,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=cluster-auditor,app.kubernetes.io/part-of=cluster-auditor,app.kubernetes.io/version=1.5.0-bb.16,helm.sh/chart=cluster-auditor-1.5.0-bb.16 2m9s
ingress-prometheus-metrics app.kubernetes.io/component=opa-exporter,app.kubernetes.io/instance=cluster-auditor-cluster-auditor,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=cluster-auditor,app.kubernetes.io/part-of=cluster-auditor,app.kubernetes.io/version=1.5.0-bb.16,helm.sh/chart=cluster-auditor-1.5.0-bb.16 2m9s
egress-dns <none> 2m9s
allow-helm-test-egress helm-test=enabled 2m9s
allow-tempo-egress <none> 2m9s
ingress-egress-ns <none> 2m9s
this-is-a-zwei-cluster-auditor-job-test-test <none> 2m9s
this-is-a-cluster-auditor-job-test-test <none> 2m9s
Linked Issue
Upgrade Notices
N/A