Resolve "Create networkpolicies for gitlab-runner"
Create networkpolicies for gitlab-runner
also add istio integration with PeerAuthentication and NetworkPolicy
related BB MR big-bang/bigbang!2581 (merged)
Closes #55 (closed)
Merge request reports
Activity
changed milestone to %2.0.0
added gitlabRunner statusdoing teambigbang labels
assigned to @kevin.wilder
assigned to @jason.flowers
added statusreview label and removed statusdoing label
requested review from @micah.nagel
requested review from @ryan.j.garcia
- Resolved by kevin.wilder
- Resolved by kevin.wilder
- Resolved by kevin.wilder
Do we want to consider adding something like the
wrapper
's extra network policies via values? https://repo1.dso.mil/big-bang/product/packages/wrapper/-/blob/main/chart/templates/network/networkpolicy-additional.yamlI think this has a great usecase for runner since people may want specific jobs to specific ingress/egress. Thinking of our dogfood cluster we could create a policy via values to allow sonarqube egress. Totally fine to say no and make this a future enhancement - although I'd suspect our default policies will cause most people issues if they are running any jobs that reach outside of the cluster.
requested review from @LynnStill