e77dce38b2
* feat: allow server netPol to specify podSelector * feat(test): add podSelector NetworkPolicy unittest * chore: introduce server.networkPolicy.ingress As suggested let users template the whole ingress object for the networkPolicy than only the podSelector. Co-authored-by: tvoran <444265+tvoran@users.noreply.github.com> --------- Co-authored-by: tvoran <444265+tvoran@users.noreply.github.com>
24 lines
740 B
YAML
24 lines
740 B
YAML
{{/*
|
|
Copyright (c) HashiCorp, Inc.
|
|
SPDX-License-Identifier: MPL-2.0
|
|
*/}}
|
|
|
|
{{- if eq (.Values.server.networkPolicy.enabled | toString) "true" }}
|
|
apiVersion: networking.k8s.io/v1
|
|
kind: NetworkPolicy
|
|
metadata:
|
|
name: {{ template "vault.fullname" . }}
|
|
labels:
|
|
app.kubernetes.io/name: {{ template "vault.name" . }}
|
|
app.kubernetes.io/instance: {{ .Release.Name }}
|
|
spec:
|
|
podSelector:
|
|
matchLabels:
|
|
app.kubernetes.io/name: {{ template "vault.name" . }}
|
|
app.kubernetes.io/instance: {{ .Release.Name }}
|
|
ingress: {{- toYaml .Values.server.networkPolicy.ingress | nindent 4 }}
|
|
{{- if .Values.server.networkPolicy.egress }}
|
|
egress:
|
|
{{- toYaml .Values.server.networkPolicy.egress | nindent 4 }}
|
|
{{ end }}
|
|
{{ end }}
|