Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

chore: add network policy #875

Merged
merged 32 commits into from
May 23, 2024
Merged

chore: add network policy #875

merged 32 commits into from
May 23, 2024

Commits on May 22, 2024

  1. chore: add limits and requests to pods 

    Signed-off-by: SdgJlbl <[email protected]>
    @SdgJlbl @guilhem-barthes
    SdgJlbl authored and guilhem-barthes committed May 22, 2024
    Configuration menu
    Copy the full SHA
    3c34c62 View commit details
    Browse the repository at this point in the history

  2. chore: add network policy 

    Signed-off-by: SdgJlbl <[email protected]>
    @SdgJlbl @guilhem-barthes
    SdgJlbl authored and guilhem-barthes committed May 22, 2024
    Configuration menu
    Copy the full SHA
    7aac462 View commit details
    Browse the repository at this point in the history

  3. revert: "chore: add limits and requests to pods" 

    This reverts commit 8d277d6.
    @guilhem-barthes
    guilhem-barthes committed May 22, 2024
    Configuration menu
    Copy the full SHA
    44a7583 View commit details
    Browse the repository at this point in the history

  4. feat: deny all traffic 

    Signed-off-by: Guilhem Barthés <[email protected]>
    @guilhem-barthes
    guilhem-barthes committed May 22, 2024
    Configuration menu
    Copy the full SHA
    e90b85d View commit details
    Browse the repository at this point in the history

  5. feat: allow connection to redis 

    Signed-off-by: Guilhem Barthés <[email protected]>
    @guilhem-barthes
    guilhem-barthes committed May 22, 2024
    Configuration menu
    Copy the full SHA
    bf94860 View commit details
    Browse the repository at this point in the history

  6. feat: allow connection to database 

    Signed-off-by: Guilhem Barthés <[email protected]>
    @guilhem-barthes
    guilhem-barthes committed May 22, 2024
    Configuration menu
    Copy the full SHA
    0edbf3d View commit details
    Browse the repository at this point in the history

  7. feat: allow connection to docker-registry 

    Signed-off-by: Guilhem Barthés <[email protected]>
    @guilhem-barthes
    guilhem-barthes committed May 22, 2024
    Configuration menu
    Copy the full SHA
    ec4d92e View commit details
    Browse the repository at this point in the history

  8. feat: allow connection to storage 

    Signed-off-by: Guilhem Barthés <[email protected]>
    @guilhem-barthes
    guilhem-barthes committed May 22, 2024
    Configuration menu
    Copy the full SHA
    4c4dab5 View commit details
    Browse the repository at this point in the history

  9. feat: allow connection to orc 

    Signed-off-by: Guilhem Barthés <[email protected]>
    @guilhem-barthes
    guilhem-barthes committed May 22, 2024
    Configuration menu
    Copy the full SHA
    f2b89d2 View commit details
    Browse the repository at this point in the history

  10. feat: allow connection to internet 

    Signed-off-by: Guilhem Barthés <[email protected]>
    @guilhem-barthes
    guilhem-barthes committed May 22, 2024
    Configuration menu
    Copy the full SHA
    aeb968e View commit details
    Browse the repository at this point in the history

  11. feat: add communication with server 

    Signed-off-by: Guilhem Barthés <[email protected]>
    @guilhem-barthes
    guilhem-barthes committed May 22, 2024
    Configuration menu
    Copy the full SHA
    185556c View commit details
    Browse the repository at this point in the history

  12. feat: add communication with k8s api server 

    Signed-off-by: Guilhem Barthés <[email protected]>
    @guilhem-barthes
    guilhem-barthes committed May 22, 2024
    Configuration menu
    Copy the full SHA
    3250412 View commit details
    Browse the repository at this point in the history

  13. feat: add internet communication for builder 

    Signed-off-by: Guilhem Barthés <[email protected]>
    @guilhem-barthes
    guilhem-barthes committed May 22, 2024
    Configuration menu
    Copy the full SHA
    0c41980 View commit details
    Browse the repository at this point in the history

  14. fix: add http requests between backends in same cluster 

    Signed-off-by: Guilhem Barthés <[email protected]>
    @guilhem-barthes
    guilhem-barthes committed May 22, 2024
    Configuration menu
    Copy the full SHA
    9425ff6 View commit details
    Browse the repository at this point in the history

  15. fix: add skaffold-local-ingress network policies 

    Signed-off-by: Guilhem Barthés <[email protected]>
    @guilhem-barthes
    guilhem-barthes committed May 22, 2024
    Configuration menu
    Copy the full SHA
    2c82384 View commit details
    Browse the repository at this point in the history

  16. chore: test with weaker policy for api k8s 

    Signed-off-by: Guilhem Barthés <[email protected]>
    @guilhem-barthes
    guilhem-barthes committed May 22, 2024
    Configuration menu
    Copy the full SHA
    0a86685 View commit details
    Browse the repository at this point in the history

  17. wip: test with weaker deny all 

    Signed-off-by: Guilhem Barthés <[email protected]>
    @guilhem-barthes
    guilhem-barthes committed May 22, 2024
    Configuration menu
    Copy the full SHA
    535f63a View commit details
    Browse the repository at this point in the history

  18. chore: remove commented code 

    Signed-off-by: Guilhem Barthés <[email protected]>
    @guilhem-barthes
    guilhem-barthes committed May 22, 2024
    Configuration menu
    Copy the full SHA
    1a39b39 View commit details
    Browse the repository at this point in the history

  19. chore: remove commented code as it is parsed by helm but not k8s 

    Signed-off-by: Guilhem Barthés <[email protected]>
    @guilhem-barthes
    guilhem-barthes committed May 22, 2024
    Configuration menu
    Copy the full SHA
    6ea6e6d View commit details
    Browse the repository at this point in the history

  20. fix: -api-server-egress was not an array 

    Signed-off-by: Guilhem Barthés <[email protected]>
    @guilhem-barthes
    guilhem-barthes committed May 22, 2024
    Configuration menu
    Copy the full SHA
    3b7662b View commit details
    Browse the repository at this point in the history

  21. fix: -api-server-egress ipBlock indentation 

    Signed-off-by: Guilhem Barthés <[email protected]>
    @guilhem-barthes
    guilhem-barthes committed May 22, 2024
    Configuration menu
    Copy the full SHA
    a5c469a View commit details
    Browse the repository at this point in the history

  22. fix: add more private IP range to target kubernetes apiserver 

    Signed-off-by: Guilhem Barthés <[email protected]>
    @guilhem-barthes
    guilhem-barthes committed May 22, 2024
    Configuration menu
    Copy the full SHA
    6a59928 View commit details
    Browse the repository at this point in the history

  23. feat: add server.allowLocalRequests parameter 

    Signed-off-by: Guilhem Barthés <[email protected]>
    @guilhem-barthes
    guilhem-barthes committed May 22, 2024
    Configuration menu
    Copy the full SHA
    302b36b View commit details
    Browse the repository at this point in the history

  24. chore: remove duplicate network policies (replaced by `allowLocalRequ… 

    …ests`)

Signed-off-by: Guilhem Barthés <[email protected]>
    @guilhem-barthes
    guilhem-barthes committed May 22, 2024
    Configuration menu
    Copy the full SHA
    e5273b7 View commit details
    Browse the repository at this point in the history

  25. fix: add role-api-k8s-client: 'true' to builder when `privateCa.ena… 

    …bled` is enabled

Signed-off-by: Guilhem Barthés <[email protected]>
    @guilhem-barthes
    guilhem-barthes committed May 22, 2024
    Configuration menu
    Copy the full SHA
    5abdb50 View commit details
    Browse the repository at this point in the history

  26. chore: remove unused deploy.kubectl 

    Signed-off-by: Guilhem Barthés <[email protected]>
    @guilhem-barthes
    guilhem-barthes committed May 22, 2024
    Configuration menu
    Copy the full SHA
    f841274 View commit details
    Browse the repository at this point in the history

  27. fix: allow communication between backends in the same cluster 

    Signed-off-by: Guilhem Barthés <[email protected]>
    @guilhem-barthes
    guilhem-barthes committed May 22, 2024
    Configuration menu
    Copy the full SHA
    dbaf27c View commit details
    Browse the repository at this point in the history

  28. fix: allow communication between local backends with `allowLocalReque… 

    …sts`

Signed-off-by: Guilhem Barthés <[email protected]>
    @guilhem-barthes
    guilhem-barthes committed May 22, 2024
    Configuration menu
    Copy the full SHA
    953e2ce View commit details
    Browse the repository at this point in the history

  29. fix: readd policy to prevent compute-task to communicate with internet 

    Signed-off-by: Guilhem Barthés <[email protected]>
    @guilhem-barthes
    guilhem-barthes committed May 22, 2024
    Configuration menu
    Copy the full SHA
    195b32c View commit details
    Browse the repository at this point in the history

  30. doc: update chart version and changelog 

    Signed-off-by: Guilhem Barthés <[email protected]>
    @guilhem-barthes
    guilhem-barthes committed May 22, 2024
    Configuration menu
    Copy the full SHA
    7dad339 View commit details
    Browse the repository at this point in the history

  31. chore: add network policies for Harbor (#906) 

    * chore: add network policies for Harbor

* chore: add newline

Signed-off-by: Guilhem Barthés <[email protected]>

---------

Signed-off-by: Guilhem Barthés <[email protected]>
Co-authored-by: Guilhem Barthés <[email protected]>
    @SdgJlbl @guilhem-barthes
    SdgJlbl and guilhem-barthes committed May 22, 2024
    Configuration menu
    Copy the full SHA
    8694b8f View commit details
    Browse the repository at this point in the history

  32. fix: remove wrong value for profile three-org 

    Signed-off-by: Guilhem Barthés <[email protected]>
    @guilhem-barthes
    guilhem-barthes committed May 22, 2024
    Configuration menu
    Copy the full SHA
    95c98f6 View commit details
    Browse the repository at this point in the history