diff --git a/CHANGELOG.md b/CHANGELOG.md index c4ec1d910bcad27233a694a1f420abf472e56fc8..548f094684b8661f1f3998581dfe25b50c170591 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -4,6 +4,12 @@ Format: [Keep a Changelog](https://keepachangelog.com/en/1.0.0/) ======= +## [1.16.2-bb.3] - 2025-03-26 + +### Changed + +- Enabled dynamic network policy for istio + ## [1.16.2-bb.2] - 2025-01-27 ### Changed diff --git a/README.md b/README.md index 203935a4ecaf4b839e89718c17bc69174dd69a3f..d4af28bba2f97554e2210acdc30cba9ff2bb3237 100644 --- a/README.md +++ b/README.md @@ -1,7 +1,7 @@ <!-- Warning: Do not manually edit this file. See notes on gluon + helm-docs at the end of this file for more information. --> # harbor -   +   An open source trusted cloud native registry that stores, signs, and scans content diff --git a/chart/Chart.yaml b/chart/Chart.yaml index dfb11a90434cbfcfc46df8349bf13357d5fdd7ab..096b60c4bd7d8a849b16da0d3a8c8d4b0edb8b43 100644 --- a/chart/Chart.yaml +++ b/chart/Chart.yaml @@ -1,6 +1,6 @@ apiVersion: v2 name: harbor -version: 1.16.2-bb.2 +version: 1.16.2-bb.3 appVersion: 2.12.2 description: An open source trusted cloud native registry that stores, signs, and scans content keywords: diff --git a/chart/templates/bigbang/networkpolicies/istio.yaml b/chart/templates/bigbang/networkpolicies/istio.yaml index 31be1fbe89abb091200582f93f0f1e394a162062..40dfb50b7f0092310df92a50a891d985077cf206 100644 --- a/chart/templates/bigbang/networkpolicies/istio.yaml +++ b/chart/templates/bigbang/networkpolicies/istio.yaml @@ -12,7 +12,11 @@ spec: - to: - namespaceSelector: matchLabels: - app.kubernetes.io/name: istio-controlplane + {{- if .Values.networkPolicies.istioNamespaceSelector }} + app.kubernetes.io/name: {{ .Values.networkPolicies.istioNamespaceSelector.egress }} + {{- else }} + app.kubernetes.io/name: "istio-controlplane" + {{- end }} podSelector: matchLabels: app: istiod @@ -32,7 +36,11 @@ spec: - from: - namespaceSelector: matchLabels: - app.kubernetes.io/name: istio-controlplane + {{- if .Values.networkPolicies.istioNamespaceSelector }} + app.kubernetes.io/name: {{ .Values.networkPolicies.istioNamespaceSelector.ingress }} + {{- else }} + app.kubernetes.io/name: "istio-controlplane" + {{- end }} podSelector: matchLabels: {{- toYaml .Values.networkPolicies.ingressLabels | nindent 10}}