UNCLASSIFIED - NO CUI

Skip to content

Egress external netpol namespace templating issue.

If you take advantage of the externalServices key the namespace of the generated network policy fails to template because it refers to Release.Namespace in the `range` - https://repo1.dso.mil/big-bang/product/packages/keycloak/-/blob/main/chart/templates/bigbang/network-policies/egress-external.yml#L8

For example:

# running helm template with externalServices
helm template oci://registry1.dso.mil/bigbang/keycloak:7.0.1-bb.3 --namespace=foo -f - <<EOF 
networkPolicies:
  enabled: true
  externalServices:
    database:
      cidrs:
        - 10.2.x.0/24 
        - 10.2.x.0/24
      ports:
        - protocol: TCP
          port: 5432
EOF

Pulled: registry1.dso.mil/bigbang/keycloak:7.0.1-bb.3
Digest: sha256:128beafb4700be7f80264ad945c462984679a4159697d38eb1d4a6dbb4deee88
dependencies.go:269: Warning: ImportValues missing table from chart upstream: "imagePullSecrets" is not a table
Error: template: keycloak/templates/bigbang/network-policies/egress-external.yaml:8:24: executing "keycloak/templates/bigbang/network-policies/egress-external.yaml" at <.Release.Namespace>: nil pointer evaluating interface {}.Namespace

Use --debug flag to render out invalid YAML