Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

netpol: allowedIngressPorts and interNamespaceAccessLabels config added with defaults retaining 0.9.1 current behavior #1842

Merged
merged 20 commits into from
Oct 23, 2020
Merged

netpol: allowedIngressPorts and interNamespaceAccessLabels config added with defaults retaining 0.9.1 current behavior #1842

merged 20 commits into from
Oct 23, 2020

Commits on Oct 22, 2020

  1. netpol: allow internamespace communication 

    Our network policies only allowed pods within the local namespace to
communicate with the hub/proxy/singleuser-server pods if they had a
certain label. But, we want any pod in any namespace with the relevant
access labels to be allowed to communicate with the associated pod, not
only pods within the local namespace.

This commit makes that possible!
    @consideRatio
    consideRatio committed Oct 22, 2020
    Configuration menu
    Copy the full SHA
    09e7486 View commit details
    Browse the repository at this point in the history

  2. netpol: add inline comment to help us avoid future confusion

    @consideRatio
    consideRatio committed Oct 22, 2020
    Configuration menu
    Copy the full SHA
    e9541a6 View commit details
    Browse the repository at this point in the history

  3. netpol: rework - allow labelled namespaces, and labelled pods in anot… 

    …her namespaces
    @consideRatio
    consideRatio committed Oct 22, 2020
    Configuration menu
    Copy the full SHA
    cf6914d View commit details
    Browse the repository at this point in the history

  4. netpol: add lots of configuration for default ingress rule

    @consideRatio
    consideRatio committed Oct 22, 2020
    Configuration menu
    Copy the full SHA
    129957e View commit details
    Browse the repository at this point in the history

  5. netpol: simplify config of interNamespace ingress

    @consideRatio
    consideRatio committed Oct 22, 2020
    Configuration menu
    Copy the full SHA
    081980f View commit details
    Browse the repository at this point in the history

  6. netpol: add autohttps netpol, mimicing proxy netpol

    @consideRatio
    consideRatio committed Oct 22, 2020
    Configuration menu
    Copy the full SHA
    bed3486 View commit details
    Browse the repository at this point in the history

  7. netpol: deprecate proxy.networkPolicy

    @consideRatio
    consideRatio committed Oct 22, 2020
    Configuration menu
    Copy the full SHA
    fdc0eec View commit details
    Browse the repository at this point in the history

  8. netpol: add proxy.chp / proxy.traefik allowHttpIngressUnconditionally… 

    … option
    @consideRatio
    consideRatio committed Oct 22, 2020
    Configuration menu
    Copy the full SHA
    99d9b26 View commit details
    Browse the repository at this point in the history

  9. netpol: ci update

    @consideRatio
    consideRatio committed Oct 22, 2020
    Configuration menu
    Copy the full SHA
    83c3d56 View commit details
    Browse the repository at this point in the history

  10. docs: update example to be aligned with best practice

    @consideRatio
    consideRatio committed Oct 22, 2020
    Configuration menu
    Copy the full SHA
    380b674 View commit details
    Browse the repository at this point in the history

  11. netpol: replace allowHttpIngressUnconditionally with allowedIngressPo… 

    …rts config
    @consideRatio
    consideRatio committed Oct 22, 2020
    Configuration menu
    Copy the full SHA
    30e9b53 View commit details
    Browse the repository at this point in the history

  12. docs: fix typo

    @consideRatio
    consideRatio committed Oct 22, 2020
    Configuration menu
    Copy the full SHA
    c0f66cd View commit details
    Browse the repository at this point in the history

  13. netpol: rename option to interNamespaceAccessLabels

    @consideRatio
    consideRatio committed Oct 22, 2020
    Configuration menu
    Copy the full SHA
    ec2aabd View commit details
    Browse the repository at this point in the history

  14. netpol: default to ignore all interNamespaceAccessLabels

    @consideRatio
    consideRatio committed Oct 22, 2020
    Configuration menu
    Copy the full SHA
    d1dcb4c View commit details
    Browse the repository at this point in the history

  15. docs: add schema.yaml entries for networkPolicy configuration

    @consideRatio
    consideRatio committed Oct 22, 2020
    Configuration menu
    Copy the full SHA
    8a9d608 View commit details
    Browse the repository at this point in the history

  16. netpol: add changelog entry about breaking change

    @consideRatio
    consideRatio committed Oct 22, 2020
    Configuration menu
    Copy the full SHA
    02f1de4 View commit details
    Browse the repository at this point in the history

  17. Apply suggestions from code review

    @consideRatio
    consideRatio committed Oct 22, 2020
    Configuration menu
    Copy the full SHA
    4e20a60 View commit details
    Browse the repository at this point in the history

  18. docs: smaller adjustments in a self-review

    @consideRatio
    consideRatio committed Oct 22, 2020
    Configuration menu
    Copy the full SHA
    0369b8e View commit details
    Browse the repository at this point in the history

  19. Apply suggestions from code review 

    Co-authored-by: Simon Li <[email protected]>
    @consideRatio @manics
    consideRatio and manics committed Oct 22, 2020
    Configuration menu
    Copy the full SHA
    b67732a View commit details
    Browse the repository at this point in the history

  20. docs: update all netpol comments to reflect suggestions

    @consideRatio
    consideRatio committed Oct 22, 2020
    Configuration menu
    Copy the full SHA
    16e140a View commit details
    Browse the repository at this point in the history