From ec18bb6af93e49701f64861b596e3b534089d1fc Mon Sep 17 00:00:00 2001 From: Brendon Lloyd Date: Fri, 23 Jul 2021 10:28:19 -1000 Subject: [PATCH] Add openshift toggle. If it's set, add port 5353 egress rule. --- CHANGELOG.md | 6 ++++++ chart/Chart.yaml | 2 +- chart/templates/networkpolicies/egress-kube-dns.yaml | 4 ++++ chart/values.yaml | 2 ++ 4 files changed, 13 insertions(+), 1 deletion(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index e1a8dd5..eef171e 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -3,6 +3,12 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/), and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html). --- +## [0.0.6-bb.1] - 2021-07-21 + +### Added + +- Add openshift toggle. If it's set, add port 5353 egress rule. + ## [0.0.6-bb.0] - 2021-06-09 diff --git a/chart/Chart.yaml b/chart/Chart.yaml index c04bc6a..a6616c5 100644 --- a/chart/Chart.yaml +++ b/chart/Chart.yaml @@ -1,6 +1,6 @@ apiVersion: v2 name: twistlock -version: 0.0.6-bb.0 +version: 0.0.6-bb.1 appVersion: 21.04.412 dependencies: - name: gluon diff --git a/chart/templates/networkpolicies/egress-kube-dns.yaml b/chart/templates/networkpolicies/egress-kube-dns.yaml index 7e7a35c..02f67a9 100644 --- a/chart/templates/networkpolicies/egress-kube-dns.yaml +++ b/chart/templates/networkpolicies/egress-kube-dns.yaml @@ -11,6 +11,10 @@ spec: ports: - port: 53 protocol: UDP + {{- if .Values.openshift }} + - port: 5353 + protocol: UDP + {{- end }} podSelector: {} # all pods in Release namespace policyTypes: - Egress diff --git a/chart/values.yaml b/chart/values.yaml index 1795bdd..23bad32 100644 --- a/chart/values.yaml +++ b/chart/values.yaml @@ -69,3 +69,5 @@ resources: requests: {} # memory: 256Mi # cpu: 100m + +openshift: false -- GitLab