Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Add API server NetworkPolicy to support a potential deny all egress #615

Draft
wants to merge 32 commits into
base: main
Choose a base branch
from
Draft

Add API server NetworkPolicy to support a potential deny all egress #615

wants to merge 32 commits into from

Conversation

kabicin
Copy link
Contributor

@kabicin kabicin commented Feb 22, 2024 •
edited
Loading

  • Add a permissive NetworkPolicy Egress so that LTPA Job (which makes a request to https://kubernetes.default.svc in create_ltpa_keys.sh) would still work under a Deny all egress NetworkPolicy.
  • Adds the permissive NetworkPolicy to the WLO controller manager's Pod.
  • Adds a permissiveNetworkPolicy Egress for Kubernetes CoreDNS

@kabicin kabicin marked this pull request as draft February 26, 2024 15:06
@kabicin kabicin marked this pull request as ready for review February 26, 2024 19:29
@kabicin kabicin mentioned this pull request Feb 29, 2024
Open
@kabicin kabicin marked this pull request as draft March 1, 2024 19:59
@kabicin kabicin marked this pull request as ready for review March 7, 2024 15:25
@leochr leochr requested a review from arturdzm March 8, 2024 17:29
@kabicin kabicin force-pushed the ltpa-network-policy branch from 8b9775f to 4daef0b Compare March 28, 2024 15:43
@kabicin kabicin force-pushed the ltpa-network-policy branch from 13fa385 to b418232 Compare April 23, 2024 17:08
kabicin added 22 commits May 3, 2024 15:49
@kabicin
Add API server NetworkPolicy to support a potential deny all egress
5a47a1d
@kabicin
Make WLO controller use API server NetworkPolicy
c0fb17a
@kabicin
Add manifest patch for api server label
862a4f0
@kabicin
Update kustomization.yaml
a634d56
@kabicin
Update webspherelibertyapplication_controller.go
2849898
@kabicin
Update webspherelibertyapplication_controller.go
dc785ea
@kabicin
Update webspherelibertyapplication_controller.go
4167e6c
@kabicin
Update webspherelibertyapplication_controller.go
2e11005
@kabicin
Add DNS network policy for OCP
7308475
@kabicin
Add namespace selector for OCP dns
96a242e
@kabicin
Update webspherelibertyapplication_controller.go
aab294e
@kabicin
Update webspherelibertyapplication_controller.go
28d54ef
@kabicin
Update webspherelibertyapplication_controller.go
0118a9c
@kabicin
Default on kube-dns in NetworkPolicy for non-OCP env
04a7e20
@kabicin
Fix TCP typo
db8891b
@kabicin
Use permissive egress for ownnamespace
5410585
@kabicin
Use permissive Egress rule for DNS/API server
feb7f61
@kabicin
Update webspherelibertyapplication_controller.go
1f49e30
@kabicin
Add DNS network policy for OCP
083ea1f
@kabicin
Add namespace selector for OCP dns
e9de870
@kabicin
Update webspherelibertyapplication_controller.go
f230c21
@kabicin
Update webspherelibertyapplication_controller.go
90639f1
@kabicin kabicin force-pushed the ltpa-network-policy branch from a31a3b4 to fff50df Compare May 3, 2024 19:49
@kabicin kabicin marked this pull request as draft September 9, 2024 15:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@arturdzm arturdzm Awaiting requested review from arturdzm

At least 1 approving review is required to merge this pull request.

Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
1 participant
@kabicin