diff --git a/.gitignore b/.gitignore index 74975a21..a1e34ce7 100644 --- a/.gitignore +++ b/.gitignore @@ -9,4 +9,5 @@ _gopath/ .vscode vendor dist -Reloader \ No newline at end of file +Reloader +!**/chart/reloader \ No newline at end of file diff --git a/deployments/kubernetes/chart/reloader/templates/networkpolicy.yaml b/deployments/kubernetes/chart/reloader/templates/networkpolicy.yaml new file mode 100644 index 00000000..11d05e6f --- /dev/null +++ b/deployments/kubernetes/chart/reloader/templates/networkpolicy.yaml @@ -0,0 +1,30 @@ +{{- if and ( .Values.reloader.netpol.enabled ) }} +apiVersion: networking.k8s.io/v1 +kind: NetworkPolicy +metadata: + annotations: +{{ include "reloader-helm3.annotations" . | indent 4 }} + labels: +{{ include "reloader-labels.chart" . | indent 4 }} +{{- if .Values.reloader.matchLabels }} +{{ toYaml .Values.reloader.matchLabels | indent 4 }} +{{- end }} + name: {{ template "reloader-fullname" . }} +spec: + podSelector: + matchLabels: + app: {{ template "reloader-fullname" . }} + release: {{ .Release.Name | quote }} +{{- if .Values.reloader.matchLabels }} +{{ toYaml .Values.reloader.matchLabels | indent 6 }} +{{- end }} + policyTypes: + - Ingress + ingress: + - ports: + - port: http + {{- with .Values.reloader.netpol.from}} + from: + {{- toYaml .| nindent 8 }} + {{- end }} +{{- end }} diff --git a/deployments/kubernetes/chart/reloader/values.yaml b/deployments/kubernetes/chart/reloader/values.yaml index 02eeaa3c..37d39024 100644 --- a/deployments/kubernetes/chart/reloader/values.yaml +++ b/deployments/kubernetes/chart/reloader/values.yaml @@ -268,3 +268,10 @@ reloader: enabled: false # Set the minimum available replicas # minAvailable: 1 + + netpol: + enabled: false + from: [] + # - podSelector: + # matchLabels: + # app.kubernetes.io/name: prometheus