diff --git a/charts/substra-backend/CHANGELOG.md b/charts/substra-backend/CHANGELOG.md index 3fd848d5c..4731b7b41 100644 --- a/charts/substra-backend/CHANGELOG.md +++ b/charts/substra-backend/CHANGELOG.md @@ -1,6 +1,11 @@ # Changelog +## [26.6.3] - 2024-05-27 + +### Changed + +- Allow pods with label `role-orchestrator-client` to communicate with internet when orchestrator is remote (#913) ## [26.6.2] - 2024-05-24 diff --git a/charts/substra-backend/Chart.yaml b/charts/substra-backend/Chart.yaml index 1a2020c23..61385d273 100644 --- a/charts/substra-backend/Chart.yaml +++ b/charts/substra-backend/Chart.yaml @@ -1,7 +1,7 @@ apiVersion: v2 name: substra-backend home: https://github.com/Substra -version: 26.6.2 +version: 26.6.3 appVersion: 0.45.0 kubeVersion: ">= 1.19.0-0" description: Main package for Substra diff --git a/charts/substra-backend/templates/networkpolicy-orchestrator-client.yaml b/charts/substra-backend/templates/networkpolicy-orchestrator-client.yaml index 36f3069b9..ae0204613 100644 --- a/charts/substra-backend/templates/networkpolicy-orchestrator-client.yaml +++ b/charts/substra-backend/templates/networkpolicy-orchestrator-client.yaml @@ -1,4 +1,3 @@ -{{- if .Values.orchestrator.sameCluster }} apiVersion: networking.k8s.io/v1 kind: NetworkPolicy metadata: @@ -11,13 +10,22 @@ spec: - Egress egress: - to: + {{- if .Values.orchestrator.sameCluster }} - ipBlock: cidr: 10.0.0.0/8 - ipBlock: cidr: 192.168.0.0/16 - ipBlock: cidr: 172.16.0.0/20 + {{- else }} + - ipBlock: + cidr: 0.0.0.0/0 + except: + - 10.0.0.0/8 + - 192.168.0.0/16 + - 172.16.0.0/20 + {{- end -}} ports: - protocol: TCP port: {{ .Values.orchestrator.port }} -{{- end -}} +