Merge branch 'ozg-7581-aggregation-manager-network-policy' into 'main'

ozg-7581 add aggregation manager network policy

See merge request !20

src/main/helm/templates/network_policy.yaml

@@ -48,6 +48,15 @@ spec:
     - podSelector:
         matchLabels:
           ozg-component: xta-adapter
+{{- if ((.Values.ozgcloud).aggregationManager).enabled }}
+  - from:
+    - podSelector: 
+        matchLabels:
+          component: aggregation-manager
+    ports:
+    - protocol: TCP
+      port: 9090
+{{- end }}
   - from:
     - namespaceSelector:
         matchLabels:

src/main/helm/values.yaml

@@ -61,4 +61,8 @@ elasticsearch:
     certificateSecretName: elasticsearch-certificate
 
 networkPolicy:
-  zentralerEingangNamespace: zentraler-eingang
\ No newline at end of file
+  zentralerEingangNamespace: zentraler-eingang
+
+ozgcloud:
+  aggregationManager:
+    enabled: false
\ No newline at end of file

src/test/helm/network_policy_test.yaml

@@ -649,4 +649,39 @@ tests:
         dnsServerNamespace: test-dns-server-namespace
     asserts:
       - hasDocuments:
-          count: 1
\ No newline at end of file
+          count: 1
+
+  - it: should add ingress rule for aggregation-manager
+    set: 
+      networkPolicy:
+        dnsServerNamespace: test-dns-namespace
+      ozgcloud:
+        aggregationManager:
+          enabled: true
+    asserts:
+      - contains:
+          path: spec.ingress
+          content:
+              ports:
+              - port: 9090
+                protocol: TCP
+              from:
+              - podSelector: 
+                  matchLabels:
+                    component: aggregation-manager
+
+  - it: should not add ingress rule for aggregation-manager
+    set: 
+      networkPolicy:
+        dnsServerNamespace: test-dns-namespace
+    asserts:
+      - notContains:
+          path: spec.ingress
+          content:
+              ports:
+              - port: 9090
+                protocol: TCP
+              from:
+              - podSelector: 
+                  matchLabels:
+                    component: aggregation-manager