From 4f30b1361e2b596ce8760fd593f08d4f9a6639fe Mon Sep 17 00:00:00 2001 From: "Huang, Sophie (sh879n)" Date: Mon, 7 Oct 2019 16:20:11 -0500 Subject: [PATCH] Mariadb: Add ingress network policy overrides This patch set adds in default mariadb ingress network policy overrides for openstack namespace. Change-Id: I037de30f868dfeb0dedb1c32209b8be6d4690962 --- mariadb/values_overrides/netpol.yaml | 77 ++++++++++++++++++++++++++++ 1 file changed, 77 insertions(+) diff --git a/mariadb/values_overrides/netpol.yaml b/mariadb/values_overrides/netpol.yaml index 7d6122be8..bcbd613d5 100644 --- a/mariadb/values_overrides/netpol.yaml +++ b/mariadb/values_overrides/netpol.yaml @@ -9,3 +9,80 @@ network_policy: ports: - protocol: TCP port: %%%REPLACE_API_PORT%%% + ingress: + - from: + - podSelector: + matchLabels: + application: keystone + - podSelector: + matchLabels: + application: heat + - podSelector: + matchLabels: + application: glance + - podSelector: + matchLabels: + application: cinder + - podSelector: + matchLabels: + application: aodh + - podSelector: + matchLabels: + application: congress + - podSelector: + matchLabels: + application: barbican + - podSelector: + matchLabels: + application: ceilometer + - podSelector: + matchLabels: + application: designate + - podSelector: + matchLabels: + application: horizon + - podSelector: + matchLabels: + application: ironic + - podSelector: + matchLabels: + application: magnum + - podSelector: + matchLabels: + application: mistral + - podSelector: + matchLabels: + application: nova + - podSelector: + matchLabels: + application: neutron + - podSelector: + matchLabels: + application: panko + - podSelector: + matchLabels: + application: rally + - podSelector: + matchLabels: + application: senlin + - podSelector: + matchLabels: + application: placement + - podSelector: + matchLabels: + application: prometheus-mysql-exporter + - podSelector: + matchLabels: + application: mariadb + - podSelector: + matchLabels: + application: mariadb-backup + ports: + - protocol: TCP + port: 3306 + - protocol: TCP + port: 4567 + - protocol: TCP + port: 80 + - protocol: TCP + port: 8080