[fix] add exception for the platform in network policy

loft-sh · Aug 1, 2024 · 58f6511 · 58f6511
1 parent 8cea580
commit 58f6511
Show file tree

Hide file tree

Showing 5 changed files with 13 additions and 1 deletion.
diff --git a/chart/templates/networkpolicy.yaml b/chart/templates/networkpolicy.yaml
@@ -95,6 +95,12 @@ spec:
           podSelector:
             matchLabels:
               k8s-app: kube-dns
+        {{- if .Values.policies.networkPolicy.platformEnabled }}
+        - podSelector:
+            matchLabels:
+              app: loft
+          namespaceSelector: {}
+        {{- end }}
   policyTypes:
     - Egress
   {{- end }}
diff --git a/chart/values.schema.json b/chart/values.schema.json
@@ -1931,6 +1931,9 @@
           "type": "boolean",
           "description": "Enabled defines if the network policy should be deployed by vCluster."
         },
+        "platformEnabled": {
+          "type": "boolean"
+        },
         "fallbackDns": {
           "type": "string"
         },

diff --git a/chart/values.yaml b/chart/values.yaml
@@ -762,6 +762,7 @@ policies:
   networkPolicy:
     # Enabled defines if the network policy should be deployed by vCluster.
     enabled: false
+    platformEnabled: true
     labels: {}
     annotations: {}
     fallbackDns: 8.8.8.8

diff --git a/config/config.go b/config/config.go
@@ -1438,7 +1438,8 @@ type LimitRange struct {
 
 type NetworkPolicy struct {
 	// Enabled defines if the network policy should be deployed by vCluster.
-	Enabled bool `json:"enabled,omitempty"`
+	Enabled         bool `json:"enabled,omitempty"`
+	PlatformEnabled bool `json:"platformEnabled,omitempty"`
 
 	FallbackDNS         string              `json:"fallbackDns,omitempty"`
 	OutgoingConnections OutgoingConnections `json:"outgoingConnections,omitempty"`

diff --git a/config/values.yaml b/config/values.yaml
@@ -460,6 +460,7 @@ policies:
 
   networkPolicy:
     enabled: false
+    platformEnabled: true
     labels: {}
     annotations: {}
     fallbackDns: 8.8.8.8