UNCLASSIFIED - NO CUI

Skip to content

Resolve "Twistlock - Add Dynamic Network Policy support"

Abimbola Abiolarequested to merge
189-twistlock-add-dynamic-network-policy-support into main

General MR

Summary

Adds functionality for package network policies to support Istio Operatorless deployments without affecting existing Big Bang deployments that use the Istio Operator:

  • It updates the default ingress and egress network policies for the twistlock, allowing dynamic namespaceSelector.matchLabel values instead of fixed istio-controlplane values anf if no value is provided or found, the label defaults to istio-controlplane.

Relevant logs/screenshots

Big Bang deployment with Istio Operator

Screenshot_2025-03-13_at_7.32.32_AM

BB deployment with twistlock and Istio Operator-less

Screenshot_2025-03-14_at_1.27.03_PM

Screenshot_2025-03-14_at_12.46.36_PM

Screenshot_2025-03-14_at_4.26.10_PM

Screenshot_2025-03-14_at_5.10.50_PM Screenshot_2025-03-14_at_11.04.15_AM

Linked Issue

#189 (closed)

big-bang/bigbang!5850 (closed)

Upgrade Notices

N/A

Edited by Abimbola Abiola

Merge request reports

UNCLASSIFIED - NO CUI