-
Notifications
You must be signed in to change notification settings - Fork 34
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
feat: consolidate network policies #3839
Conversation
de21642
to
5cf9b9f
Compare
You can access the deployment of this PR at https://ci-renku-3839.dev.renku.ch |
694bff3
to
2658f06
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
There's still the setup-job-network-policy, not sure if you wanted to move that as well?
I left that one on purpose. Because it already sits there near all the rest of the setup job helm temoplates. EDIT: @Panaetius I will actually clean that up as well. I looked at it earlier but did not notice that it opens the metrics port to postgres for everyone. That is not the end of the world but the metrics port on postgres being open to all pods has nothing to do with the setup jobs. So I will just move this as well. |
2947e62
to
99a6b2e
Compare
99a6b2e
to
aa2106f
Compare
aa2106f
to
1572506
Compare
1572506
to
042f3bb
Compare
@aledegano @Panaetius this is ready. |
/deploy extra-values=networkPolicies.allowAllIngressFromNamespaces={default},networkPolicies.allowAllIngressFromPods[0].podSelector.matchLabels.app=allowAllIngress