diff --git a/CHANGELOG.md b/CHANGELOG.md index 3f42276a8e0be58b77419fc08ee4f01068cb165a..aea70d8d91b959437684c67a77a4fd7d1f23b66a 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -3,6 +3,10 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/), and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html). --- +## [9.2.6-bb.12] - 2021-06-02 +### Modified +- Modified helm-test network policy to be more restrictive. + ## [9.2.6-bb.11] - 2021-05-27 ### Modified - Modified the bigbang monitoring network policy to be more restrictive. diff --git a/chart/Chart.yaml b/chart/Chart.yaml index 457eb034d692dd59686dec8c7eb36924352d6373..162b12128c52d9455c4fca67048cabe5bea7f61e 100644 --- a/chart/Chart.yaml +++ b/chart/Chart.yaml @@ -2,7 +2,7 @@ apiVersion: v1 appVersion: 8.7.1-community name: sonarqube description: SonarQube is an open sourced code quality scanning tool -version: 9.2.6-bb.11 +version: 9.2.6-bb.12 keywords: - coverage - security diff --git a/chart/templates/bigbang/networkpolicies/helm-test-network-policy.yaml b/chart/templates/bigbang/networkpolicies/helm-test-network-policy.yaml index fd3d356a2f95ea489c9de7af1b24c42f058d1d1c..319b0341e0daa84d2762360c6cbf0678ac243d88 100644 --- a/chart/templates/bigbang/networkpolicies/helm-test-network-policy.yaml +++ b/chart/templates/bigbang/networkpolicies/helm-test-network-policy.yaml @@ -1,9 +1,7 @@ {{- $bbtests := .Values.bbtests | default dict -}} -{{- $cypress := $bbtests.cypress | default dict -}} {{- $enabled := (hasKey $bbtests "enabled") -}} -{{- $artifacts := (hasKey $cypress "artifacts") -}} -{{- if and $enabled $artifacts }} -{{- if and .Values.networkPolicies.enabled .Values.bbtests.enabled .Values.bbtests.cypress.artifacts }} +{{- if $enabled }} +{{- if and .Values.networkPolicies.enabled .Values.bbtests.enabled }} apiVersion: networking.k8s.io/v1 kind: NetworkPolicy metadata: @@ -16,11 +14,6 @@ spec: policyTypes: - Egress egress: - - to: - - ipBlock: - cidr: 0.0.0.0/0 - # ONLY Block requests to AWS metadata IP - except: - - 169.254.169.254/32 + - {} +{{- end }} {{- end }} -{{- end }} \ No newline at end of file