From ed145fb431f86132d9d308589b50c160269c60ca Mon Sep 17 00:00:00 2001 From: afaras0572 <slawal@oteemo.com> Date: Wed, 26 Mar 2025 11:40:01 -0500 Subject: [PATCH 1/3] adding dynamic netpol for istio --- chart/Chart.yaml | 2 +- chart/templates/bigbang/networkpolicies/istio.yaml | 12 ++++++++++-- 2 files changed, 11 insertions(+), 3 deletions(-) diff --git a/chart/Chart.yaml b/chart/Chart.yaml index dfb11a90..096b60c4 100644 --- a/chart/Chart.yaml +++ b/chart/Chart.yaml @@ -1,6 +1,6 @@ apiVersion: v2 name: harbor -version: 1.16.2-bb.2 +version: 1.16.2-bb.3 appVersion: 2.12.2 description: An open source trusted cloud native registry that stores, signs, and scans content keywords: diff --git a/chart/templates/bigbang/networkpolicies/istio.yaml b/chart/templates/bigbang/networkpolicies/istio.yaml index 31be1fbe..00e58007 100644 --- a/chart/templates/bigbang/networkpolicies/istio.yaml +++ b/chart/templates/bigbang/networkpolicies/istio.yaml @@ -12,7 +12,11 @@ spec: - to: - namespaceSelector: matchLabels: - app.kubernetes.io/name: istio-controlplane + {{- if .Values.networkPolicies.istioNamespaceSelector }} + app.kubernetes.io/name: {{ .Values.networkPolicies.istioNamespaceSelector.ingress }} + {{- else }} + app.kubernetes.io/name: "istio-controlplane" + {{- end }} podSelector: matchLabels: app: istiod @@ -32,7 +36,11 @@ spec: - from: - namespaceSelector: matchLabels: - app.kubernetes.io/name: istio-controlplane + {{- if .Values.networkPolicies.istioNamespaceSelector }} + app.kubernetes.io/name: {{ .Values.networkPolicies.istioNamespaceSelector.ingress }} + {{- else }} + app.kubernetes.io/name: "istio-controlplane" + {{- end }} podSelector: matchLabels: {{- toYaml .Values.networkPolicies.ingressLabels | nindent 10}} -- GitLab From ace1934bb7753f7893530036f8c20741d413ccda Mon Sep 17 00:00:00 2001 From: afaras0572 <slawal@oteemo.com> Date: Wed, 26 Mar 2025 11:46:23 -0500 Subject: [PATCH 2/3] update changlog and readme files --- CHANGELOG.md | 6 ++++++ README.md | 2 +- 2 files changed, 7 insertions(+), 1 deletion(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index c4ec1d91..548f0946 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -4,6 +4,12 @@ Format: [Keep a Changelog](https://keepachangelog.com/en/1.0.0/) ======= +## [1.16.2-bb.3] - 2025-03-26 + +### Changed + +- Enabled dynamic network policy for istio + ## [1.16.2-bb.2] - 2025-01-27 ### Changed diff --git a/README.md b/README.md index 203935a4..d4af28bb 100644 --- a/README.md +++ b/README.md @@ -1,7 +1,7 @@ <!-- Warning: Do not manually edit this file. See notes on gluon + helm-docs at the end of this file for more information. --> # harbor -   +   An open source trusted cloud native registry that stores, signs, and scans content -- GitLab From 7a1e44e896de2aa4489c2cd307c6b352867a3d59 Mon Sep 17 00:00:00 2001 From: afaras0572 <slawal@oteemo.com> Date: Fri, 28 Mar 2025 14:44:14 -0500 Subject: [PATCH 3/3] updating dynamic netpols --- chart/templates/bigbang/networkpolicies/istio.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/chart/templates/bigbang/networkpolicies/istio.yaml b/chart/templates/bigbang/networkpolicies/istio.yaml index 00e58007..40dfb50b 100644 --- a/chart/templates/bigbang/networkpolicies/istio.yaml +++ b/chart/templates/bigbang/networkpolicies/istio.yaml @@ -13,7 +13,7 @@ spec: - namespaceSelector: matchLabels: {{- if .Values.networkPolicies.istioNamespaceSelector }} - app.kubernetes.io/name: {{ .Values.networkPolicies.istioNamespaceSelector.ingress }} + app.kubernetes.io/name: {{ .Values.networkPolicies.istioNamespaceSelector.egress }} {{- else }} app.kubernetes.io/name: "istio-controlplane" {{- end }} -- GitLab