UNCLASSIFIED - NO CUI

Skip to content

Syntax and egress fixes on Network Policy resources

Ryan Garcia requested to merge np-template-fixes into main

Bug fixes on Network Policy resources:

  • Updating cluster egress to "true" all egress of 0.0.0.0/0 except AWS API Access when SSO is enabled.
  • Removing duplicate podSelector in istio specific Network Policy template
  • Adding in template for in namespace allow communication to Elasticsearch since whitelisting other specific apps blocks the existing "allow-in-ns" rule.
Edited by Ryan Garcia

Merge request reports

UNCLASSIFIED - NO CUI