From fd52f228ab2fde681a9cd91aba277dea122da3fe Mon Sep 17 00:00:00 2001 From: Patrick Spies Date: Thu, 19 Oct 2023 09:26:51 +0200 Subject: [PATCH 1/2] feat(helm) add egress-rule to netpol --- .../chart/reloader/templates/networkpolicy.yaml | 8 ++++++++ deployments/kubernetes/chart/reloader/values.yaml | 1 + 2 files changed, 9 insertions(+) diff --git a/deployments/kubernetes/chart/reloader/templates/networkpolicy.yaml b/deployments/kubernetes/chart/reloader/templates/networkpolicy.yaml index 11d05e6f..884b5739 100644 --- a/deployments/kubernetes/chart/reloader/templates/networkpolicy.yaml +++ b/deployments/kubernetes/chart/reloader/templates/networkpolicy.yaml @@ -20,6 +20,7 @@ spec: {{- end }} policyTypes: - Ingress + - Egress ingress: - ports: - port: http @@ -27,4 +28,11 @@ spec: from: {{- toYaml .| nindent 8 }} {{- end }} + egress: + - ports: + - port: 443 + {{- with .Values.reloader.netpol.from}} + to: + {{- toYaml .| nindent 8 }} + {{- end }} {{- end }} diff --git a/deployments/kubernetes/chart/reloader/values.yaml b/deployments/kubernetes/chart/reloader/values.yaml index 5b7926be..079f6270 100644 --- a/deployments/kubernetes/chart/reloader/values.yaml +++ b/deployments/kubernetes/chart/reloader/values.yaml @@ -276,5 +276,6 @@ reloader: # - podSelector: # matchLabels: # app.kubernetes.io/name: prometheus + to: [] webhookUrl: "" From cad27649f9029d3cc192b63cfef291f21c8ee182 Mon Sep 17 00:00:00 2001 From: Patrick Spies Date: Thu, 19 Oct 2023 09:28:34 +0200 Subject: [PATCH 2/2] fix typo --- .../kubernetes/chart/reloader/templates/networkpolicy.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/deployments/kubernetes/chart/reloader/templates/networkpolicy.yaml b/deployments/kubernetes/chart/reloader/templates/networkpolicy.yaml index 884b5739..c197e786 100644 --- a/deployments/kubernetes/chart/reloader/templates/networkpolicy.yaml +++ b/deployments/kubernetes/chart/reloader/templates/networkpolicy.yaml @@ -31,7 +31,7 @@ spec: egress: - ports: - port: 443 - {{- with .Values.reloader.netpol.from}} + {{- with .Values.reloader.netpol.to}} to: {{- toYaml .| nindent 8 }} {{- end }}