diff --git a/src/main/helm/templates/network_policy.yaml b/src/main/helm/templates/network_policy.yaml index 1f2f9e15f26f38f39b91143e9e2801c794c6f0a6..b8183ad098fd1c1a6767d626d035f1b382c9713c 100644 --- a/src/main/helm/templates/network_policy.yaml +++ b/src/main/helm/templates/network_policy.yaml @@ -38,6 +38,13 @@ spec: ingress: - ports: - port: 8080 + - from: + - namespaceSelector: + matchLabels: + name: {{ (.Values.networkPolicy).monitoringNamespace | default "openshift-user-workload-monitoring" }} + ports: + - protocol: TCP + port: 8081 egress: - to: - podSelector: diff --git a/src/test/helm/network_policy_test.yaml b/src/test/helm/network_policy_test.yaml index 9ef5c98f73dbc6764fb116a38c5f9209234d775e..30fc46d189a03d78ac050d89d8ec157b94f84ac7 100644 --- a/src/test/helm/network_policy_test.yaml +++ b/src/test/helm/network_policy_test.yaml @@ -70,6 +70,13 @@ tests: ingress: - ports: - port: 8080 + - from: + - namespaceSelector: + matchLabels: + name: openshift-user-workload-monitoring + ports: + - protocol: TCP + port: 8081 egress: - to: - podSelector: @@ -92,6 +99,23 @@ tests: - port: 5353 protocol: TCP + - it: should set monitoring namespace + set: + networkPolicy: + dnsServerNamespace: test-dns-namespace + monitoringNamespace: test-monitoring + asserts: + - contains: + path: spec.ingress + content: + from: + - namespaceSelector: + matchLabels: + name: test-monitoring + ports: + - protocol: TCP + port: 8081 + - it: test network policy disabled set: networkPolicy: