add egress rules for sentinel np

powerhome · Feb 7, 2024 · 31cb162 · 31cb162
1 parent 7a0d2dd
commit 31cb162
Show file tree

Hide file tree

Showing 2 changed files with 52 additions and 0 deletions.
diff --git a/operator/redisfailover/service/generator.go b/operator/redisfailover/service/generator.go
@@ -563,6 +563,19 @@ func generateSentinelNetworkPolicy(rf *redisfailoverv1.RedisFailover, labels map
 					Ports: ports,
 				},
 			},
+			Egress: []np.NetworkPolicyEgressRule{
+				np.NetworkPolicyEgressRule{
+					To: []np.NetworkPolicyPeer{
+						np.NetworkPolicyPeer{
+							NamespaceSelector: &metav1.LabelSelector{
+								MatchLabels: map[string]string{
+									"app.kubernetes.io/instance": namespace,
+								},
+							},
+						},
+					},
+				},
+			},
 		},
 	}
 }

diff --git a/operator/redisfailover/service/generator_test.go b/operator/redisfailover/service/generator_test.go
@@ -1478,6 +1478,19 @@ func TestSentinelNetworkPolicy(t *testing.T) {
 							},
 						},
 					},
+					Egress: []networkingv1.NetworkPolicyEgressRule{
+						networkingv1.NetworkPolicyEgressRule{
+							To: []networkingv1.NetworkPolicyPeer{
+								networkingv1.NetworkPolicyPeer{
+									NamespaceSelector: &metav1.LabelSelector{
+										MatchLabels: map[string]string{
+											"app.kubernetes.io/instance": namespace,
+										},
+									},
+								},
+							},
+						},
+					},
 				},
 			},
 		},
@@ -1534,6 +1547,19 @@ func TestSentinelNetworkPolicy(t *testing.T) {
 							},
 						},
 					},
+					Egress: []networkingv1.NetworkPolicyEgressRule{
+						networkingv1.NetworkPolicyEgressRule{
+							To: []networkingv1.NetworkPolicyPeer{
+								networkingv1.NetworkPolicyPeer{
+									NamespaceSelector: &metav1.LabelSelector{
+										MatchLabels: map[string]string{
+											"app.kubernetes.io/instance": namespace,
+										},
+									},
+								},
+							},
+						},
+					},
 				},
 			},
 		},
@@ -1600,6 +1626,19 @@ func TestSentinelNetworkPolicy(t *testing.T) {
 							},
 						},
 					},
+					Egress: []networkingv1.NetworkPolicyEgressRule{
+						networkingv1.NetworkPolicyEgressRule{
+							To: []networkingv1.NetworkPolicyPeer{
+								networkingv1.NetworkPolicyPeer{
+									NamespaceSelector: &metav1.LabelSelector{
+										MatchLabels: map[string]string{
+											"app.kubernetes.io/instance": namespace,
+										},
+									},
+								},
+							},
+						},
+					},
 				},
 			},
 		},