diff --git a/divingbell/templates/network_policy.yaml b/divingbell/templates/network_policy.yaml new file mode 100644 index 0000000..34b9123 --- /dev/null +++ b/divingbell/templates/network_policy.yaml @@ -0,0 +1,18 @@ +# Copyright 2017-2018 The Openstack-Helm Authors. +# +# Licensed under the Apache License, Version 2.0 (the "License"); +# you may not use this file except in compliance with the License. +# You may obtain a copy of the License at +# +# http://www.apache.org/licenses/LICENSE-2.0 +# +# Unless required by applicable law or agreed to in writing, software +# distributed under the License is distributed on an "AS IS" BASIS, +# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. +# See the License for the specific language governing permissions and +# limitations under the License. + +{{- if .Values.manifests.network_policy -}} +{{- $netpol_opts := dict "envAll" . "name" "application" "label" "divingbell" -}} +{{ $netpol_opts | include "helm-toolkit.manifests.kubernetes_network_policy" }} +{{- end -}} diff --git a/divingbell/values.yaml b/divingbell/values.yaml index 7da928f..1645e40 100644 --- a/divingbell/values.yaml +++ b/divingbell/values.yaml @@ -196,6 +196,13 @@ pod: memory: "128Mi" cpu: "100m" +network_policy: + divingbell: + ingress: + - {} + egress: + - {} + manifests: daemonset_ethtool: true daemonset_mounts: true @@ -206,3 +213,4 @@ manifests: daemonset_perm: true daemonset_exec: true daemonset_apparmor: true + network_policy: false