Fixes #79 : Support additional custom network policies
General MR
Summary
Fixes #79 (closed). This MR adds support for custom network policies to the vault component.
Relevant logs/screenshots
Using this override
networkPolicies:
enabled: true
addons:
vault:
enabled: true
sourceType: "git"
git:
repo: https://repo1.dso.mil/big-bang/product/packages/vault.git
path: "./chart"
tag: null
branch: "79_custom_network_policies"
values:
networkPolicies:
additionalPolicies:
- name: this-is-a-vault-job-test-test
spec:
podSelector: {}
policyTypes:
- Egress
egress:
- to:
- ipBlock:
cidr: 172.20.0.0/12
- name: this-is-a-zwei-vault-job-test-test
spec:
podSelector: {}
policyTypes:
- Ingress
egress:
- to:
- ipBlock:
cidr: 172.20.0.0/12
... network policies are deployed:
$ kubectl get NetworkPolicies -n vault | grep test
NAME POD-SELECTOR AGE
this-is-a-zwei-vault-job-test-test <none> 13s
this-is-a-vault-job-test-test <none> 13s
... and when network policies are disabled, they are not deployed:
# networkPolicies:
# enabled: false
# ....
$ kubectl get NetworkPolicies -n vault
No resources found in vault namespace.
Linked Issue
Upgrade Notices
N/A
Edited by Andrew Kesterson