Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

networkPolicy customization #2334

Merged
merged 3 commits into from
Sep 9, 2021
Merged

Conversation

Namanl2001
Copy link
Contributor

Fixes #2287

Changes

Allowed customization for NetworkPolicy with namespaceSelector and podSelector via helm.

Verification

Verified locally

Signed-off-by: Namanl2001 <namanlakhwani@gmail.com>
@Namanl2001
Copy link
Contributor Author

cc: @realshuting

@realshuting
Copy link
Member

Thanks @Namanl2001 , it looks good to me.

@antoineozenne - can you please help review?

Copy link

@antoineozenne antoineozenne left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks for this modification, but it does not seem to allow access to the metrics-port (8000). The major problem in 2287 is this one. Maybe we could do something like https://github.com/bitnami/charts/blob/master/bitnami/redis-cluster/templates/networkpolicy.yaml#L33?

charts/kyverno/templates/networkpolicy.yaml Outdated Show resolved Hide resolved
charts/kyverno/templates/networkpolicy.yaml Show resolved Hide resolved
@realshuting realshuting self-assigned this Sep 2, 2021
Signed-off-by: Namanl2001 <namanlakhwani@gmail.com>
Copy link

@antoineozenne antoineozenne left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I haven't tested but it looks OK to me.

charts/kyverno/templates/networkpolicy.yaml Outdated Show resolved Hide resolved
Signed-off-by: Namanl2001 <namanlakhwani@gmail.com>
@realshuting realshuting merged commit dfd9a8d into kyverno:main Sep 9, 2021
@Namanl2001 Namanl2001 deleted the networkpolicy branch September 10, 2021 17:20
@windowsrefund
Copy link
Contributor

Seems to me this was never tested? networkPolicy support in 2.1.3 is totally broken and there's no documentation on how to use this refactored version.

@Namanl2001
Copy link
Contributor Author

@windowsrefund there was an issue which was fixed in this pr #2423

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Allow NetworkPolicy customization
4 participants