UNCLASSIFIED - NO CUI

Skip to content

Updated existing network policies to be more dynamic

General MR

Summary

  • Removed duplicated network policies
    • The istio-allow.yaml that was removed contained two duplicate network policies. The first was a duplicate of the allow-to-istio-ingressgateway network policy and the second was a duplicate of the allow-istiod-egress network policy.
  • Updated istiod egress and ingress from gateway network policies to be more dynamic in order to get it to work with both Istio implementations

Relevant logs/screenshots

Network Policies Specific to Istio (Current Istio Implementation):

image

image

Network Policies for Istio Operatorless:

image

image

**Note: istiod is now in istio-system namespace and gateways are now in istio-gateway namespace.

Linked Issue

issue

Upgrade Notices

N/A

Merge request reports

Loading