Add Istio Operatorless Network Policy support
Description:
- Adds support to package for Istio Operatorless Network Policy dynamic values. Istio Operatorless dynamic values only get applied when Istio3 is enabled in the Big Bang umbrella.
- If no
IstioNamespaaceSelector
values are found the value defaults to the defualt operator deployment value:istio-controlplane
.
Add Dynamic values for Istio Operatorless:
- Identify the Ingress/Egress policies in the linked table with hardcoded namespace selector labels.
- For Egress policies replace hardcoded namespaceSelector labels
app.kubernetes.io/name: istio-controlplane
with:
{{- if .Values.networkPolicies.istioNamespaceSelector }}
app.kubernetes.io/name: {{ .Values.networkPolicies.istioNamespaceSelector.ingress }}
{{- else }}
app.kubernetes.io/name: "istio-controlplane"
{{- end }}
- For Ingress policies replace hardcoded namespaceSelector labels
app.kubernetes.io/name: istio-controlplane
values with the following:
{{- if .Values.networkPolicies.istioNamespaceSelector }}
app.kubernetes.io/name: {{ .Values.networkPolicies.istioNamespaceSelector.ingress }}
{{- else }}
app.kubernetes.io/name: "istio-controlplane"
{{- end }}
Testing Validation:
- Create k3d dev cluster and deploy Big Bang with the package enabled and pointed to the MR branch.
- Validate there are no deployment issues.
- For deployments using Istio Operator confirm that package network policies listed in table still have the
istio-control
namespace selector label applied