wow

CHANGELOG.md

@@ -4,6 +4,13 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 
 ---
 
+## [0.0.6-bb.0] - 2021-06-09
+
+### Fixed
+
+- Bug with istio network policy, allow egress in ns
+
+
 ## [0.0.5-bb.0] - 2021-06-02
 
 ### Changed

chart/Chart.yaml

 apiVersion: v2
 name: twistlock
-version: 0.0.5-bb.0
+version: 0.0.6-bb.0
 appVersion: 21.04.412
 dependencies:
   - name: gluon

chart/templates/networkpolicies/ingress-allow-ns.yml → chart/templates/networkpolicies/allow-in-ns.yml

@@ -2,13 +2,17 @@
 apiVersion: networking.k8s.io/v1
 kind: NetworkPolicy
 metadata:
-  name: ingress-allow-ns
-  namespace: "{{ .Release.Namespace }}"
+  name: allow-in-ns
+  namespace: {{ .Release.Namespace }}
 spec:
-  ingress:
-    - from:
-      - podSelector: {} # all pods in namespace
-  podSelector: {} # all pods
+  podSelector: {}
   policyTypes:
     - Ingress
+    - Egress
+  ingress:
+    - from:
+        - podSelector: {}
+  egress:
+    - to:
+        - podSelector: {}
 {{- end }}

chart/templates/networkpolicies/ingress-istio-ingressgateway.yml

@@ -7,7 +7,7 @@ metadata:
 spec:
   podSelector:
     matchLabels:
-      app: twistlock-console
+      name: twistlock-console
   policyTypes:
     - Ingress
   ingress:
@@ -20,5 +20,7 @@ spec:
             {{- toYaml .Values.networkPolicies.ingressLabels | nindent 12}}
       ports:
       - port: 8081 #Default UI console Port
+        protocol: TCP
       - port: 8083 #TLS configured UI console Port
+        protocol: TCP
 {{- end }}