Merge pull request #71 from kyverno/improve-network-policy

configure additional eggress rules for kyvernoPlugin and UI

CHANGELOG.md

@@ -1,7 +1,10 @@
 # Changelog
 
+# 1.9.2
+* Add additional egress rules to kyvernoPlugin and UI subchart with `networkPolicy.egress`
+
 # 1.9.1
-* Configure the Kubernetes API Port for NetworkPolicy
+* Configure the Kubernetes API Port for NetworkPolicy with `networkPolicy.kubernetesApiPort`
 
 # 1.9.0
 * Implement NetworkPolicy for Policy Reporter and related Components [[#68](https://github.com/kyverno/policy-reporter/pull/68) by [windowsrefund](https://github.com/windowsrefund)]

charts/policy-reporter/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 1.4.4
 - name: ui
   repository: ""
-  version: 1.9.0
+  version: 1.9.1
 - name: kyvernoPlugin
   repository: ""
-  version: 0.6.1
-digest: sha256:84d9269f9f276c3448d26968b31b69d593323c733dd1f687ca6f670426d4461b
-generated: "2021-09-09T20:35:28.564714+02:00"
+  version: 0.6.2
+digest: sha256:b58f651ea7774420c8a6a5a80e1d9384f95521d0198a3a14f5491e6430e61498
+generated: "2021-09-09T21:51:59.713717+02:00"

charts/policy-reporter/Chart.yaml

@@ -5,7 +5,7 @@ description: |
   It creates Prometheus Metrics and can send rule validation events to different targets like Loki, Elasticsearch, Slack or Discord
 
 type: application
-version: 1.9.1
+version: 1.9.2
 appVersion: 1.8.5
 
 dependencies:
@@ -16,8 +16,8 @@ dependencies:
   - name: ui
     condition: ui.enabled
     repository: ""
-    version: "1.9.0"
+    version: "1.9.1"
   - name: kyvernoPlugin
     condition: kyvernoPlugin.enabled
     repository: ""
-    version: "0.6.1"
+    version: "0.6.2"

charts/policy-reporter/charts/kyvernoPlugin/Chart.yaml

@@ -3,5 +3,5 @@ name: kyvernoPlugin
 description: Policy Reporter Kyverno Plugin
 
 type: application
-version: 0.6.1
+version: 0.6.2
 appVersion: 0.3.2

charts/policy-reporter/charts/kyvernoPlugin/templates/networkpolicy.yaml

@@ -24,4 +24,7 @@ spec:
     ports:
     - protocol: TCP
       port: {{ .Values.networkPolicy.kubernetesApiPort }}
+  {{- with .Values.networkPolicy.egress }}
+    {{- toYaml . | nindent 2 }}
+  {{- end }}
 {{- end }}

charts/policy-reporter/charts/kyvernoPlugin/values.yaml

@@ -85,3 +85,4 @@ affinity: {}
 networkPolicy:
   enabled: false
   kubernetesApiPort: 6443
+  egress: []

charts/policy-reporter/charts/ui/Chart.yaml

@@ -3,5 +3,5 @@ name: ui
 description: Policy Reporter UI
 
 type: application
-version: 1.9.0
+version: 1.9.1
 appVersion: 0.14.0

charts/policy-reporter/charts/ui/templates/networkpolicy.yaml

@@ -20,4 +20,7 @@ spec:
     ports:
     - protocol: TCP
       port: {{ .Values.global.port }}
+  {{- with .Values.networkPolicy.egress }}
+    {{- toYaml . | nindent 2 }}
+  {{- end }}
 {{- end }}

charts/policy-reporter/charts/ui/values.yaml

@@ -104,3 +104,4 @@ affinity: {}
 # used and configured in a default-deny fashion.
 networkPolicy:
   enabled: false
+  egress: []