UNCLASSIFIED - NO CUI

Skip to content

#96 : Support addiitonal network policies via the values yaml

Andrew Kesterson requested to merge 96_additional_network_policies into main

General MR

Summary

Adds support to Nexus for custom network policies via values yaml.

This depends on big-bang/bigbang!4184 (merged) for a documentation reference

Relevant logs/screenshots

Given the following overrides:

addons:
  nexusRepositoryManager:
    enabled: true
    git:
      repo: https://repo1.dso.mil/big-bang/product/packages/nexus.git    
      tag: null
      branch: "96_additional_network_policies"
    values:
      networkPolicies:
        enabled: true
        additionalPolicies:
        - name: this-is-a-nexus-job-test-test
          spec:
            podSelector: {}
            policyTypes:
            - Egress
            egress:
            - to:
              - ipBlock:
                  cidr: 172.20.0.0/12
        - name: this-is-a-zwei-nexus-job-test-test
          spec:
            podSelector: {}
            policyTypes:
            - Ingress
            ingress:
            - from:
              - ipBlock:
                  cidr: 172.20.0.0/12

... we get additional network policies:

Every 2.0s: kubectl get NetworkPolicies -n nexus-repository-manager         BPH-MAC21.local: Wed Apr 24 14:52:28 2024

NAME                                    POD-SELECTOR                                      AGE
allow-tempo-egress                      <none>                                            58s
egress-outreach-manager                 app.kubernetes.io/name=nexus-repository-manager   58s
default-deny-all                        <none>                                            58s
allow-to-istio-egress                   <none>                                            58s
allow-scraping                          app.kubernetes.io/name=nexus-repository-manager   58s
kube-api-dns-egress                     <none>                                            58s
allow-in-ns                             <none>           58s
allow-from-istio-ingressgateway         app.kubernetes.io/name=nexus-repository-manager   58s
this-is-a-nexus-job-test-test           <none>                                            58s
this-is-a-zwei-nexus-job-test-test      <none>                                            58s

Linked Issue

#96 (closed)

Upgrade Notices

N/A

Edited by Andrew Kesterson

Merge request reports