[bitnami/pytorch] fix: 🐛 Add allowExternalEgress to avoid breaking istio (#22958)

Signed-off-by: Javier Salmeron Garcia <jsalmeron@vmware.com>

Author: javsalgar

bitnami/pytorch/Chart.yaml

@@ -33,4 +33,4 @@ maintainers:
 name: pytorch
 sources:
 - https://github.com/bitnami/charts/tree/main/bitnami/pytorch
-version: 3.7.0
+version: 3.8.0

bitnami/pytorch/README.md

@@ -186,6 +186,7 @@ The command removes all the Kubernetes components associated with the chart and
 | `service.headless.annotations`          | Annotations for the headless service.                                              | `{}`        |
 | `networkPolicy.enabled`                 | Specifies whether a NetworkPolicy should be created                                | `true`      |
 | `networkPolicy.allowExternal`           | Don't require server label for connections                                         | `true`      |
+| `networkPolicy.allowExternalEgress`     | Allow the pod to access any range of port and all destinations.                    | `true`      |
 | `networkPolicy.extraIngress`            | Add extra ingress rules to the NetworkPolice                                       | `[]`        |
 | `networkPolicy.extraEgress`             | Add extra ingress rules to the NetworkPolicy                                       | `[]`        |
 | `networkPolicy.ingressNSMatchLabels`    | Labels to match to allow traffic from other namespaces                             | `{}`        |

bitnami/pytorch/templates/networkpolicy.yaml

@@ -20,6 +20,10 @@ spec:
   policyTypes:
     - Ingress
     - Egress
+  {{- if .Values.networkPolicy.allowExternalEgress }}
+  egress:
+    - {}
+  {{- else }}
   egress:
     # Allow dns resolution
     - ports:
@@ -41,6 +45,7 @@ spec:
     {{- if .Values.networkPolicy.extraEgress }}
     {{- include "common.tplvalues.render" ( dict "value" .Values.rts.networkPolicy.extraEgress "context" $ ) | nindent 4 }}
     {{- end }}
+  {{- end }}
   ingress:
     # Allow inbound connections
     - ports:

bitnami/pytorch/values.yaml

@@ -477,6 +477,9 @@ networkPolicy:
   ## (with the correct destination port).
   ##
   allowExternal: true
+  ## @param networkPolicy.allowExternalEgress Allow the pod to access any range of port and all destinations.
+  ##
+  allowExternalEgress: true
   ## @param networkPolicy.extraIngress [array] Add extra ingress rules to the NetworkPolice
   ## e.g:
   ## extraIngress: