add network policy yamls (#4745)

* add network policy yamls Signed-off-by: Shovan Maity <[email protected]> * remove litmus-cluster-scope.yaml Signed-off-by: Shovan Maity <[email protected]> * rename litmus-namespaced-scope.yaml -> litmus-installation.yaml Signed-off-by: Shovan Maity <[email protected]> --------- Signed-off-by: Shovan Maity <[email protected]>
litmuschaos · Jul 8, 2024 · a02767d · a02767d
1 parent 9f4fe25
commit a02767d
Show file tree

Hide file tree

Showing 2 changed files with 84 additions and 0 deletions.
diff --git a/...er/manifests/litmus-namespaced-scope.yaml → ...center/manifests/litmus-installation.yaml b/...er/manifests/litmus-namespaced-scope.yaml → ...center/manifests/litmus-installation.yaml
@@ -273,6 +273,25 @@ spec:
               cpu: "550m"
               ephemeral-storage: "1Gi"
 ---
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+  name: litmusportal-server
+  namespace: litmus
+  labels:
+    component: litmusportal-server
+spec:
+  policyTypes:
+  - Ingress
+  podSelector:
+    matchLabels:
+      component: litmusportal-server
+  ingress:
+  - from:
+    - podSelector:
+        matchLabels:
+          component: litmusportal-frontend
+---
 apiVersion: v1
 kind: Service
 metadata:
@@ -362,6 +381,29 @@ spec:
               cpu: "550m"
               ephemeral-storage: "1Gi"
 ---
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+  name: litmusportal-auth-server
+  namespace: litmus
+  labels:
+    component: litmusportal-auth-server
+spec:
+  policyTypes:
+  - Ingress
+  podSelector:
+    matchLabels:
+      component: litmusportal-auth-server
+  ingress:
+  - from:
+    - podSelector:
+        matchLabels:
+          component: litmusportal-frontend
+  - from:
+    - podSelector:
+        matchLabels:
+          component: litmusportal-server
+---
 apiVersion: v1
 kind: Service
 metadata:

diff --git a/chaoscenter/manifests/litmus-without-resources.yaml b/chaoscenter/manifests/litmus-without-resources.yaml
@@ -248,6 +248,25 @@ spec:
             - containerPort: 8001
           imagePullPolicy: Always
 ---
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+  name: litmusportal-server
+  namespace: litmus
+  labels:
+    component: litmusportal-server
+spec:
+  policyTypes:
+  - Ingress
+  podSelector:
+    matchLabels:
+      component: litmusportal-server
+  ingress:
+  - from:
+    - podSelector:
+        matchLabels:
+          component: litmusportal-frontend
+---
 apiVersion: v1
 kind: Service
 metadata:
@@ -328,6 +347,29 @@ spec:
             - containerPort: 3031
           imagePullPolicy: Always
 ---
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+  name: litmusportal-auth-server
+  namespace: litmus
+  labels:
+    component: litmusportal-auth-server
+spec:
+  policyTypes:
+  - Ingress
+  podSelector:
+    matchLabels:
+      component: litmusportal-auth-server
+  ingress:
+  - from:
+    - podSelector:
+        matchLabels:
+          component: litmusportal-frontend
+  - from:
+    - podSelector:
+        matchLabels:
+          component: litmusportal-server
+---
 apiVersion: v1
 kind: Service
 metadata: