remove default-policies and enable DNS policies (#284)

* remove default-policies and enable DNS policies Signed-off-by: Matias Charriere <[email protected]> * update changelog Signed-off-by: Matias Charriere <[email protected]> --------- Signed-off-by: Matias Charriere <[email protected]>
giantswarm · Apr 16, 2024 · 155e0e1 · 155e0e1
1 parent 422f9d9
commit 155e0e1
Show file tree

Hide file tree

Showing 3 changed files with 10 additions and 2 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -10,6 +10,11 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 ### Added
 
 - Add teleport support to SSH into nodes (disabled by default)
+- Enable DNS network policies from network-policies-app.
+
+### Removed
+
+- Remove default network policies from cilium-app.
 
 ## [0.16.0] - 2024-04-02
 

diff --git a/helm/cluster-cloud-director/templates/cilium-helmrelease.yaml b/helm/cluster-cloud-director/templates/cilium-helmrelease.yaml
@@ -63,7 +63,8 @@ spec:
             value: "true"
 {{- if .Values.internal.ciliumNetworkPolicy.enabled }}
     defaultPolicies:
-      enabled: true
+      remove: true
+      enabled: false
       tolerations:
         - effect: NoSchedule
           operator: Exists

diff --git a/helm/cluster-cloud-director/templates/netpol-helmrelease.yaml b/helm/cluster-cloud-director/templates/netpol-helmrelease.yaml
@@ -33,7 +33,9 @@ spec:
       retries: 30
   # Default values
   # https://github.com/giantswarm/network-policies-app/blob/main/helm/network-policies-app/values.yaml
-  # values:
+  values:
+    allowEgressToDNS:
+      enabled: true
 ---
 apiVersion: source.toolkit.fluxcd.io/v1beta2
 kind: HelmRepository