Network Policies block plugin marketplace and update checks

Not sure if we want to enable these, but just in case. Need to allow egress...

2021.09.30 17:45:50 ERROR web[AXw3zUXYnfUJFnEEAABT][o.s.s.p.UpdateCenterClient] Fail to connect to update center
org.sonar.api.utils.SonarException: Fail to download: https://update.sonarsource.org/update-center.properties (no proxy)

added sonarqube teamXForce labels

set weight to 1

added priority6 label

changed milestone to %1.19.0

changed iteration to Big Bang Iterations Oct 5, 2021 - Oct 18, 2021

May be worth investigating if UpdateCenter is needed at all (can be disabled with -Dsonar.updatecenter.activate=false) since airgap installations won't be able to connect to begin with and I would hesitate adding an NP to allow egress to the world if it's not needed/required.

Would be useful for the plugin marketplace though, and egress to the greater internet still means ingress is locked down so wouldn't be the worst thing in the world.

changed milestone to %1.20.0

changed iteration to Big Bang Iterations Oct 19, 2021 - Nov 1, 2021

added statusdoing label

assigned to @michaelmartin

created merge request !56 (merged) to address this issue

mentioned in merge request !56 (merged)

I tested with the -Dsonar.updatecenter.activate=false -- I think this might stop a timer from firing and logging exceptions, but you will still see exceptions if you manually try to update or do stuff in the marketplace.

I added an https egress with a flag to enable or disable it. It's enabled by default for now. It can be toggled at the bigbang level with:

addons:  
  sonarqube:
    enabled: true
    values:
      networkPolicies:
        egressHttps:
          enabled: false 

added statusreview label and removed statusdoing label

closed with merge request big-bang/bigbang!1045 (merged)

removed statusreview label