Adding egress from minio tenants to API

CHANGELOG.md

@@ -3,6 +3,10 @@
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/), and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
 ---
+## [7.10.0-bb.1] - 2023-05-10
+### Added
+- Added a networkpolicy for egress from minio to the controlplane
+
 ## [7.10.0-bb.0] - 2023-04-18
 ### Changed
 - ironbank/opensource/mattermost/mattermost updated from 7.9.1 to 7.10.0

README.md

 # mattermost
 
-![Version: 7.10.0-bb.0](https://img.shields.io/badge/Version-7.10.0--bb.0-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 7.10.0](https://img.shields.io/badge/AppVersion-7.10.0-informational?style=flat-square)
+![Version: 7.10.0-bb.1](https://img.shields.io/badge/Version-7.10.0--bb.1-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 7.10.0](https://img.shields.io/badge/AppVersion-7.10.0-informational?style=flat-square)
 
 Deployment of mattermost
 

chart/Chart.yaml

@@ -2,7 +2,7 @@
 apiVersion: v2
 name: mattermost
 type: application
-version: 7.10.0-bb.0
+version: 7.10.0-bb.1
 appVersion: 7.10.0
 description: "Deployment of mattermost"
 keywords:

chart/templates/bigbang/networkpolicies/egress-minio-tenant.yaml

+{{- if and .Values.networkPolicies.enabled .Values.minio.install }}
+apiVersion: networking.k8s.io/v1
+kind: NetworkPolicy
+metadata:
+  name: allow-minio-api-egress
+  namespace: {{ .Release.Namespace }}
+spec:
+  podSelector:
+    matchLabels:
+      app: minio  
+  policyTypes:
+    - Egress
+  egress:
+    - to:
+      - ipBlock:
+          cidr: {{ .Values.networkPolicies.controlPlaneCidr }}
+          {{- if eq .Values.networkPolicies.controlPlaneCidr "0.0.0.0/0" }}
+          # ONLY Block requests to cloud metadata IP
+          except:
+            - 169.254.169.254/32
+          {{- end }}
+{{- end }}

tests/test-values.yml

@@ -15,6 +15,7 @@ postgresql:
 
 networkPolicies:
   enabled: true
+  controlPlaneCidr: 172.16.0.0/12
 
 bbtests:
   enabled: true