feat: add a network policy (#36)

Signed-off-by: Davide Madrisan <[email protected]>
getlago · Apr 5, 2024 · bbf86f3 · bbf86f3
1 parent 327a244
commit bbf86f3
Show file tree

Hide file tree

Showing 2 changed files with 24 additions and 0 deletions.
diff --git a/templates/network-policy.yaml b/templates/network-policy.yaml
@@ -0,0 +1,19 @@
+{{- if .Values.global.networkPolicy.enabled }}
+apiVersion: networking.k8s.io/v1
+kind: NetworkPolicy
+metadata:
+  annotations:
+  name: {{ .Release.Name }}
+spec:
+  policyTypes:
+  - Egress
+  - Ingress
+  egress:
+  {{- with .Values.global.networkPolicy }}
+  {{- toYaml .egress | nindent 4 }}
+  {{- end }}
+  ingress:
+  {{- with .Values.global.networkPolicy }}
+  {{- toYaml .ingress | nindent 4 }}
+  {{- end }}
+{{- end }}
diff --git a/values.yaml b/values.yaml
@@ -83,6 +83,11 @@ global:
     #apiHostname:
     #className:
 
+  networkPolicy:
+    enabled: false
+    egress: []
+    ingress: []
+
   #serviceAccountName:
 
   # If kubectlVersion is not supplied it will be inferred using the version of the cluster that Lago is deployed on.