From fd52f228ab2fde681a9cd91aba277dea122da3fe Mon Sep 17 00:00:00 2001 From: Patrick Spies Date: Thu, 19 Oct 2023 09:26:51 +0200 Subject: [PATCH 1/3] feat(helm) add egress-rule to netpol --- .../chart/reloader/templates/networkpolicy.yaml | 8 ++++++++ deployments/kubernetes/chart/reloader/values.yaml | 1 + 2 files changed, 9 insertions(+) diff --git a/deployments/kubernetes/chart/reloader/templates/networkpolicy.yaml b/deployments/kubernetes/chart/reloader/templates/networkpolicy.yaml index 11d05e6f..884b5739 100644 --- a/deployments/kubernetes/chart/reloader/templates/networkpolicy.yaml +++ b/deployments/kubernetes/chart/reloader/templates/networkpolicy.yaml @@ -20,6 +20,7 @@ spec: {{- end }} policyTypes: - Ingress + - Egress ingress: - ports: - port: http @@ -27,4 +28,11 @@ spec: from: {{- toYaml .| nindent 8 }} {{- end }} + egress: + - ports: + - port: 443 + {{- with .Values.reloader.netpol.from}} + to: + {{- toYaml .| nindent 8 }} + {{- end }} {{- end }} diff --git a/deployments/kubernetes/chart/reloader/values.yaml b/deployments/kubernetes/chart/reloader/values.yaml index 5b7926be..079f6270 100644 --- a/deployments/kubernetes/chart/reloader/values.yaml +++ b/deployments/kubernetes/chart/reloader/values.yaml @@ -276,5 +276,6 @@ reloader: # - podSelector: # matchLabels: # app.kubernetes.io/name: prometheus + to: [] webhookUrl: "" From cad27649f9029d3cc192b63cfef291f21c8ee182 Mon Sep 17 00:00:00 2001 From: Patrick Spies Date: Thu, 19 Oct 2023 09:28:34 +0200 Subject: [PATCH 2/3] fix typo --- .../kubernetes/chart/reloader/templates/networkpolicy.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/deployments/kubernetes/chart/reloader/templates/networkpolicy.yaml b/deployments/kubernetes/chart/reloader/templates/networkpolicy.yaml index 884b5739..c197e786 100644 --- a/deployments/kubernetes/chart/reloader/templates/networkpolicy.yaml +++ b/deployments/kubernetes/chart/reloader/templates/networkpolicy.yaml @@ -31,7 +31,7 @@ spec: egress: - ports: - port: 443 - {{- with .Values.reloader.netpol.from}} + {{- with .Values.reloader.netpol.to}} to: {{- toYaml .| nindent 8 }} {{- end }} From 6fca0d9a6bd1883e3c43d3d246e016ae6bbce918 Mon Sep 17 00:00:00 2001 From: stakater-user Date: Thu, 19 Oct 2023 12:33:01 +0000 Subject: [PATCH 3/3] [skip-ci] Update artifacts --- deployments/kubernetes/chart/reloader/Chart.yaml | 4 ++-- .../kubernetes/chart/reloader/values.yaml | 4 ++-- .../kubernetes/manifests/clusterrole.yaml | 2 +- .../kubernetes/manifests/clusterrolebinding.yaml | 2 +- deployments/kubernetes/manifests/deployment.yaml | 10 +++++----- .../kubernetes/manifests/serviceaccount.yaml | 2 +- deployments/kubernetes/reloader.yaml | 16 ++++++++-------- 7 files changed, 20 insertions(+), 20 deletions(-) diff --git a/deployments/kubernetes/chart/reloader/Chart.yaml b/deployments/kubernetes/chart/reloader/Chart.yaml index 0ec21dc5..4509266b 100644 --- a/deployments/kubernetes/chart/reloader/Chart.yaml +++ b/deployments/kubernetes/chart/reloader/Chart.yaml @@ -3,8 +3,8 @@ apiVersion: v1 name: reloader description: Reloader chart that runs on kubernetes -version: 1.0.44 -appVersion: v1.0.44 +version: 1.0.45 +appVersion: v1.0.45 keywords: - Reloader - kubernetes diff --git a/deployments/kubernetes/chart/reloader/values.yaml b/deployments/kubernetes/chart/reloader/values.yaml index 079f6270..39ec1f56 100644 --- a/deployments/kubernetes/chart/reloader/values.yaml +++ b/deployments/kubernetes/chart/reloader/values.yaml @@ -84,10 +84,10 @@ reloader: labels: provider: stakater group: com.stakater.platform - version: v1.0.44 + version: v1.0.45 image: name: ghcr.io/stakater/reloader - tag: v1.0.44 + tag: v1.0.45 pullPolicy: IfNotPresent # Support for extra environment variables. env: diff --git a/deployments/kubernetes/manifests/clusterrole.yaml b/deployments/kubernetes/manifests/clusterrole.yaml index c02c3a01..96cbe042 100644 --- a/deployments/kubernetes/manifests/clusterrole.yaml +++ b/deployments/kubernetes/manifests/clusterrole.yaml @@ -9,7 +9,7 @@ metadata: meta.helm.sh/release-name: "reloader" labels: app: reloader-reloader - chart: "reloader-1.0.44" + chart: "reloader-1.0.45" release: "reloader" heritage: "Helm" app.kubernetes.io/managed-by: "Helm" diff --git a/deployments/kubernetes/manifests/clusterrolebinding.yaml b/deployments/kubernetes/manifests/clusterrolebinding.yaml index 7f4a6e0c..e132e3e1 100644 --- a/deployments/kubernetes/manifests/clusterrolebinding.yaml +++ b/deployments/kubernetes/manifests/clusterrolebinding.yaml @@ -9,7 +9,7 @@ metadata: meta.helm.sh/release-name: "reloader" labels: app: reloader-reloader - chart: "reloader-1.0.44" + chart: "reloader-1.0.45" release: "reloader" heritage: "Helm" app.kubernetes.io/managed-by: "Helm" diff --git a/deployments/kubernetes/manifests/deployment.yaml b/deployments/kubernetes/manifests/deployment.yaml index 5cf0f6a8..a3d9e83e 100644 --- a/deployments/kubernetes/manifests/deployment.yaml +++ b/deployments/kubernetes/manifests/deployment.yaml @@ -8,13 +8,13 @@ metadata: meta.helm.sh/release-name: "reloader" labels: app: reloader-reloader - chart: "reloader-1.0.44" + chart: "reloader-1.0.45" release: "reloader" heritage: "Helm" app.kubernetes.io/managed-by: "Helm" group: com.stakater.platform provider: stakater - version: v1.0.44 + version: v1.0.45 name: reloader-reloader namespace: default spec: @@ -28,16 +28,16 @@ spec: metadata: labels: app: reloader-reloader - chart: "reloader-1.0.44" + chart: "reloader-1.0.45" release: "reloader" heritage: "Helm" app.kubernetes.io/managed-by: "Helm" group: com.stakater.platform provider: stakater - version: v1.0.44 + version: v1.0.45 spec: containers: - - image: "ghcr.io/stakater/reloader:v1.0.44" + - image: "ghcr.io/stakater/reloader:v1.0.45" imagePullPolicy: IfNotPresent name: reloader-reloader diff --git a/deployments/kubernetes/manifests/serviceaccount.yaml b/deployments/kubernetes/manifests/serviceaccount.yaml index d5d8ca8a..5b8a6310 100644 --- a/deployments/kubernetes/manifests/serviceaccount.yaml +++ b/deployments/kubernetes/manifests/serviceaccount.yaml @@ -8,7 +8,7 @@ metadata: meta.helm.sh/release-name: "reloader" labels: app: reloader-reloader - chart: "reloader-1.0.44" + chart: "reloader-1.0.45" release: "reloader" heritage: "Helm" app.kubernetes.io/managed-by: "Helm" diff --git a/deployments/kubernetes/reloader.yaml b/deployments/kubernetes/reloader.yaml index 4e3c8e52..e89a1e2b 100644 --- a/deployments/kubernetes/reloader.yaml +++ b/deployments/kubernetes/reloader.yaml @@ -8,7 +8,7 @@ metadata: meta.helm.sh/release-name: "reloader" labels: app: reloader-reloader - chart: "reloader-1.0.44" + chart: "reloader-1.0.45" release: "reloader" heritage: "Helm" app.kubernetes.io/managed-by: "Helm" @@ -25,7 +25,7 @@ metadata: meta.helm.sh/release-name: "reloader" labels: app: reloader-reloader - chart: "reloader-1.0.44" + chart: "reloader-1.0.45" release: "reloader" heritage: "Helm" app.kubernetes.io/managed-by: "Helm" @@ -92,7 +92,7 @@ metadata: meta.helm.sh/release-name: "reloader" labels: app: reloader-reloader - chart: "reloader-1.0.44" + chart: "reloader-1.0.45" release: "reloader" heritage: "Helm" app.kubernetes.io/managed-by: "Helm" @@ -115,13 +115,13 @@ metadata: meta.helm.sh/release-name: "reloader" labels: app: reloader-reloader - chart: "reloader-1.0.44" + chart: "reloader-1.0.45" release: "reloader" heritage: "Helm" app.kubernetes.io/managed-by: "Helm" group: com.stakater.platform provider: stakater - version: v1.0.44 + version: v1.0.45 name: reloader-reloader namespace: default spec: @@ -135,16 +135,16 @@ spec: metadata: labels: app: reloader-reloader - chart: "reloader-1.0.44" + chart: "reloader-1.0.45" release: "reloader" heritage: "Helm" app.kubernetes.io/managed-by: "Helm" group: com.stakater.platform provider: stakater - version: v1.0.44 + version: v1.0.45 spec: containers: - - image: "ghcr.io/stakater/reloader:v1.0.44" + - image: "ghcr.io/stakater/reloader:v1.0.45" imagePullPolicy: IfNotPresent name: reloader-reloader