keep only pod-selector for egress rules

powerhome · Feb 8, 2024 · e68beb6 · e68beb6
1 parent 0c2091e
commit e68beb6
Show file tree

Hide file tree

Showing 2 changed files with 0 additions and 28 deletions.
diff --git a/operator/redisfailover/service/generator.go b/operator/redisfailover/service/generator.go
@@ -511,13 +511,6 @@ func generateSentinelNetworkPolicy(rf *redisfailoverv1.RedisFailover, labels map
 			Egress: []np.NetworkPolicyEgressRule{
 				np.NetworkPolicyEgressRule{
 					To: []np.NetworkPolicyPeer{
-						np.NetworkPolicyPeer{
-							NamespaceSelector: &metav1.LabelSelector{
-								MatchLabels: map[string]string{
-									"app.kubernetes.io/instance": namespace,
-								},
-							},
-						},
 						np.NetworkPolicyPeer{
 							PodSelector: &metav1.LabelSelector{
 								MatchLabels: redisfailoverLabels,

diff --git a/operator/redisfailover/service/generator_test.go b/operator/redisfailover/service/generator_test.go
@@ -1481,13 +1481,6 @@ func TestSentinelNetworkPolicy(t *testing.T) {
 					Egress: []networkingv1.NetworkPolicyEgressRule{
 						networkingv1.NetworkPolicyEgressRule{
 							To: []networkingv1.NetworkPolicyPeer{
-								networkingv1.NetworkPolicyPeer{
-									NamespaceSelector: &metav1.LabelSelector{
-										MatchLabels: map[string]string{
-											"app.kubernetes.io/instance": namespace,
-										},
-									},
-								},
 								networkingv1.NetworkPolicyPeer{
 									PodSelector: &metav1.LabelSelector{
 										MatchLabels: map[string]string{
@@ -1557,13 +1550,6 @@ func TestSentinelNetworkPolicy(t *testing.T) {
 					Egress: []networkingv1.NetworkPolicyEgressRule{
 						networkingv1.NetworkPolicyEgressRule{
 							To: []networkingv1.NetworkPolicyPeer{
-								networkingv1.NetworkPolicyPeer{
-									NamespaceSelector: &metav1.LabelSelector{
-										MatchLabels: map[string]string{
-											"app.kubernetes.io/instance": namespace,
-										},
-									},
-								},
 								networkingv1.NetworkPolicyPeer{
 									PodSelector: &metav1.LabelSelector{
 										MatchLabels: map[string]string{
@@ -1643,13 +1629,6 @@ func TestSentinelNetworkPolicy(t *testing.T) {
 					Egress: []networkingv1.NetworkPolicyEgressRule{
 						networkingv1.NetworkPolicyEgressRule{
 							To: []networkingv1.NetworkPolicyPeer{
-								networkingv1.NetworkPolicyPeer{
-									NamespaceSelector: &metav1.LabelSelector{
-										MatchLabels: map[string]string{
-											"app.kubernetes.io/instance": namespace,
-										},
-									},
-								},
 								networkingv1.NetworkPolicyPeer{
 									PodSelector: &metav1.LabelSelector{
 										MatchLabels: map[string]string{