UNCLASSIFIED - NO CUI

Skip to content

Keycloak - Support Istio Operatorless Network Policies

General MR

Summary

Merge request introduced changes do not impact current Big Bang deployments with Istio Operator. MR adds support for package network policies to work with Istio Operatorless deployments:

  • Modifies default ingress/egress policies for Keycloak to set dynamic namespaceSelector labels in place of hardcoded istio-controlplane labels that currently only work with Istio Operator deployments.
  • If values is not set or found the label will default to istio-controlplane

Relevant logs/screenshots

Network Policies with Current Istio Implementation

image

image

Network Policies with Istio Operatorless

image

image

Linked Issue

issue

Upgrade Notices

N/A

Closes #236 (closed)

Edited by Jimmy Bourque

Merge request reports

Loading