diff --git a/charts/promenade/templates/network_policy.yaml b/charts/promenade/templates/network_policy.yaml new file mode 100644 index 00000000..9b9dace4 --- /dev/null +++ b/charts/promenade/templates/network_policy.yaml @@ -0,0 +1,18 @@ +# Copyright 2017-2018 The Openstack-Helm Authors. +# +# Licensed under the Apache License, Version 2.0 (the "License"); +# you may not use this file except in compliance with the License. +# You may obtain a copy of the License at +# +# http://www.apache.org/licenses/LICENSE-2.0 +# +# Unless required by applicable law or agreed to in writing, software +# distributed under the License is distributed on an "AS IS" BASIS, +# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. +# See the License for the specific language governing permissions and +# limitations under the License. + +{{- if .Values.manifests.network_policy -}} +{{- $netpol_opts := dict "envAll" . "name" "application" "label" "promenade" -}} +{{ $netpol_opts | include "helm-toolkit.manifests.kubernetes_network_policy" }} +{{- end -}} diff --git a/charts/promenade/values.yaml b/charts/promenade/values.yaml index 9da64095..4e34d026 100644 --- a/charts/promenade/values.yaml +++ b/charts/promenade/values.yaml @@ -73,6 +73,13 @@ labels: node_selector_key: ucp-control-plane node_selector_value: enabled +network_policy: + promenade: + ingress: + - {} + egress: + - {} + manifests: configmap_bin: true configmap_etc: true @@ -84,6 +91,7 @@ manifests: job_ks_user: true secret_keystone: true test_promenade_api: true + network_policy: false network: api: