CHANGELOG.md

@@ -3,6 +3,13 @@
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/), and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
 ---
+## [7.0.0-bb.1] - 2025-02-11
+
+### Changed
+
+- Updated istio network policies to be more dynamic in preparation for Istio Operatorless
+- Removed duplicate network policies
+
 ## [7.0.0-bb.0] - 2025-01-24
 
 ### Changed

README.md

 <!-- Warning: Do not manually edit this file. See notes on gluon + helm-docs at the end of this file for more information. -->
 # minio-operator
 
-![Version: 7.0.0-bb.0](https://img.shields.io/badge/Version-7.0.0--bb.0-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: v7.0.0](https://img.shields.io/badge/AppVersion-v7.0.0-informational?style=flat-square) ![Maintenance Track: bb_integrated](https://img.shields.io/badge/Maintenance_Track-bb_integrated-green?style=flat-square)
+![Version: 7.0.0-bb.1](https://img.shields.io/badge/Version-7.0.0--bb.1-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: v7.0.0](https://img.shields.io/badge/AppVersion-v7.0.0-informational?style=flat-square) ![Maintenance Track: bb_integrated](https://img.shields.io/badge/Maintenance_Track-bb_integrated-green?style=flat-square)
 
 A Helm chart for MinIO Operator
 
 ## Upstream References
-- <https://min.io>
 
+- <https://min.io>
 - <https://github.com/minio/operator>
 
 ## Upstream Release Notes

chart/Chart.yaml

 apiVersion: v2
 description: A Helm chart for MinIO Operator
 name: minio-operator
-version: 7.0.0-bb.0
+version: 7.0.0-bb.1
 appVersion: v7.0.0
 keywords:
   - storage

chart/templates/bigbang/networkpolicies/allow-istiod-egress.yaml

@@ -12,7 +12,11 @@ spec:
   - to:
     - namespaceSelector:
         matchLabels:
-          app.kubernetes.io/name: istio-controlplane
+          {{- if .Values.networkPolicies.istioNamespaceSelector }}
+          app.kubernetes.io/name: {{ .Values.networkPolicies.istioNamespaceSelector.egress }}
+          {{- else }}
+          app.kubernetes.io/name: "istio-controlplane"
+          {{- end }}
       podSelector:
         matchLabels:
           app: istiod

chart/templates/bigbang/networkpolicies/istio-allow.yaml

-{{- if and .Values.networkPolicies.enabled .Values.istio.enabled }}
-apiVersion: networking.k8s.io/v1
-kind: NetworkPolicy
-metadata:
-  name: allow-istio-ingress
-  namespace: {{ .Release.Namespace }}
-spec:
-  ingress:
-  - from:
-    - namespaceSelector:
-        matchLabels:
-          app.kubernetes.io/name: istio-controlplane
-      podSelector:
-        matchLabels:
-          {{- toYaml .Values.networkPolicies.ingressLabels | nindent 10}}
-    ports:
-    - port: 9090
-      protocol: TCP
-  podSelector: {}
-  policyTypes:
-  - Ingress
-
----
-apiVersion: networking.k8s.io/v1
-kind: NetworkPolicy
-metadata:
-  name: allow-istio-egress
-  namespace: {{ .Release.Namespace }}
-spec:
-  podSelector: {}
-  policyTypes:
-  - Egress
-  egress:
-  - to:
-    - namespaceSelector:
-        matchLabels:
-          app.kubernetes.io/name: istio-controlplane
-      podSelector:
-        matchLabels:
-          app: istiod
-    ports:
-    - port: 15012
-{{- end }}

chart/templates/bigbang/networkpolicies/istio.yaml

@@ -12,7 +12,11 @@ spec:
   - from:
     - namespaceSelector:
         matchLabels:
-          app.kubernetes.io/name: istio-controlplane
+          {{- if .Values.networkPolicies.istioNamespaceSelector }}
+          app.kubernetes.io/name: {{ .Values.networkPolicies.istioNamespaceSelector.ingress }}
+          {{- else }}
+          app.kubernetes.io/name: "istio-controlplane"
+          {{- end }}
       podSelector:
         matchLabels:
           {{- toYaml .Values.networkPolicies.ingressLabels | nindent 10}}