From f4136d3d3d427656b6448b94c8b2710be2d7bc94 Mon Sep 17 00:00:00 2001 From: Shovan Maity Date: Mon, 8 Jul 2024 17:25:48 +0530 Subject: [PATCH] add network policy yamls (#4745) * add network policy yamls Signed-off-by: Shovan Maity * remove litmus-cluster-scope.yaml Signed-off-by: Shovan Maity * rename litmus-namespaced-scope.yaml -> litmus-installation.yaml Signed-off-by: Shovan Maity --------- Signed-off-by: Shovan Maity Signed-off-by: andoriyaprashant --- ...ed-scope.yaml => litmus-installation.yaml} | 42 +++++++++++++++++++ .../manifests/litmus-without-resources.yaml | 42 +++++++++++++++++++ 2 files changed, 84 insertions(+) rename chaoscenter/manifests/{litmus-namespaced-scope.yaml => litmus-installation.yaml} (93%) diff --git a/chaoscenter/manifests/litmus-namespaced-scope.yaml b/chaoscenter/manifests/litmus-installation.yaml similarity index 93% rename from chaoscenter/manifests/litmus-namespaced-scope.yaml rename to chaoscenter/manifests/litmus-installation.yaml index 0edbe9827d8..ce9d4edc9a7 100644 --- a/chaoscenter/manifests/litmus-namespaced-scope.yaml +++ b/chaoscenter/manifests/litmus-installation.yaml @@ -273,6 +273,25 @@ spec: cpu: "550m" ephemeral-storage: "1Gi" --- +kind: NetworkPolicy +apiVersion: networking.k8s.io/v1 +metadata: + name: litmusportal-server + namespace: litmus + labels: + component: litmusportal-server +spec: + policyTypes: + - Ingress + podSelector: + matchLabels: + component: litmusportal-server + ingress: + - from: + - podSelector: + matchLabels: + component: litmusportal-frontend +--- apiVersion: v1 kind: Service metadata: @@ -362,6 +381,29 @@ spec: cpu: "550m" ephemeral-storage: "1Gi" --- +kind: NetworkPolicy +apiVersion: networking.k8s.io/v1 +metadata: + name: litmusportal-auth-server + namespace: litmus + labels: + component: litmusportal-auth-server +spec: + policyTypes: + - Ingress + podSelector: + matchLabels: + component: litmusportal-auth-server + ingress: + - from: + - podSelector: + matchLabels: + component: litmusportal-frontend + - from: + - podSelector: + matchLabels: + component: litmusportal-server +--- apiVersion: v1 kind: Service metadata: diff --git a/chaoscenter/manifests/litmus-without-resources.yaml b/chaoscenter/manifests/litmus-without-resources.yaml index 075b4d239c4..1c8c6fc6fe4 100644 --- a/chaoscenter/manifests/litmus-without-resources.yaml +++ b/chaoscenter/manifests/litmus-without-resources.yaml @@ -248,6 +248,25 @@ spec: - containerPort: 8001 imagePullPolicy: Always --- +kind: NetworkPolicy +apiVersion: networking.k8s.io/v1 +metadata: + name: litmusportal-server + namespace: litmus + labels: + component: litmusportal-server +spec: + policyTypes: + - Ingress + podSelector: + matchLabels: + component: litmusportal-server + ingress: + - from: + - podSelector: + matchLabels: + component: litmusportal-frontend +--- apiVersion: v1 kind: Service metadata: @@ -328,6 +347,29 @@ spec: - containerPort: 3031 imagePullPolicy: Always --- +kind: NetworkPolicy +apiVersion: networking.k8s.io/v1 +metadata: + name: litmusportal-auth-server + namespace: litmus + labels: + component: litmusportal-auth-server +spec: + policyTypes: + - Ingress + podSelector: + matchLabels: + component: litmusportal-auth-server + ingress: + - from: + - podSelector: + matchLabels: + component: litmusportal-frontend + - from: + - podSelector: + matchLabels: + component: litmusportal-server +--- apiVersion: v1 kind: Service metadata: