fix(helm-chart): add a network policy allowing egress to ibm cis

This commit is contained in:
James Reeve 2024-01-05 15:27:24 -05:00
parent 1ca17544d8
commit 2e95f8d804
No known key found for this signature in database

View file

@ -27,12 +27,13 @@ metadata:
spec:
podSelector:
matchLabels:
app: {{ include "cert-manager-ibm-cis-webhook.name" . }}
app.kubernetes.io/name: {{ include "cert-manager-ibm-cis-webhook.name" . }}
policyTypes:
- Ingress
ingress:
- from:
- podSelector: {}
- namespaceSelector: {}
ports:
- protocol: TCP
port: {{ .Values.containerPort }}
@ -44,9 +45,23 @@ metadata:
spec:
podSelector:
matchLabels:
app: {{ include "cert-manager-ibm-cis-webhook.name" . }}
app.kubernetes.io/name: {{ include "cert-manager-ibm-cis-webhook.name" . }}
policyTypes:
- Egress
egress:
- {}
---
apiVersion: networking.k8s.io/v1
kind: NetworkPolicy
metadata:
name: allow-egress-to-cis
spec:
podSelector:
matchLabels:
app.kubernetes.io/name: {{ include "cert-manager-ibm-cis-webhook.name" . }}
policyTypes:
- Egress
egress:
- ports:
- port: 443
{{- end }}