diff --git a/helm-chart/templates/networkpolicy.yaml b/helm-chart/templates/networkpolicy.yaml index 9c7fa4c..1e00975 100644 --- a/helm-chart/templates/networkpolicy.yaml +++ b/helm-chart/templates/networkpolicy.yaml @@ -1,31 +1,32 @@ -# apiVersion: networking.k8s.io/v1 -# kind: NetworkPolicy -# metadata: -# name: {{ .Values.name }} -# namespace: {{ .Values.namespace | default .Values.name }} -# labels: -# service: {{ .Values.name }} -# spec: -# podSelector: -# matchLabels: -# service: {{ .Values.name }} -# policyTypes: -# - Ingress -# - Egress -# ingress: -# - from: -# - namespaceSelector: -# matchLabels: -# name: ingress-nginx -# ports: -# - protocol: TCP -# port: {{ .Values.port }} -# egress: -# - to: -# - namespaceSelector: {} -# podSelector: {} -# ports: -# - protocol: TCP -# port: 53 -# - protocol: UDP -# port: 53 +apiVersion: networking.k8s.io/v1 +kind: NetworkPolicy +metadata: + name: {? {.Values.name: ''} : ''} + namespace: {? {.Values.namespace | default .Values.name: ''} : ''} + labels: + service: {? {.Values.name: ''} : ''} +spec: + podSelector: + matchLabels: + service: {? {.Values.name: ''} : ''} + policyTypes: + - Ingress + - Egress + ingress: + - from: + - namespaceSelector: + matchLabels: + name: ingress-nginx + ports: + - protocol: TCP + port: {? {.Values.port: ''} : ''} + egress: {} + # TODO, optionally add egress restriction. + # - to: + # - namespaceSelector: {} + # podSelector: {} + # ports: + # - protocol: TCP + # port: 53 + # - protocol: UDP + # port: 53