diff --git a/src/main/helm/templates/network_policy.yaml b/src/main/helm/templates/network_policy.yaml index 5cee334200dc20e95ac6ea0cc7f857d2f4ae876b..99ce5027feb5d8152fd1fd07eb7dc7be4cb3c317 100644 --- a/src/main/helm/templates/network_policy.yaml +++ b/src/main/helm/templates/network_policy.yaml @@ -89,4 +89,9 @@ spec: - ipBlock: cidr: {{ required "ozgcloud.bayernid.cidr muss angegeben sein" ((.Values.ozgcloud).bayernid).cidr }} {{- end }} + +{{- with (.Values.networkPolicy).additionalEgressConfig }} +{{ toYaml . | indent 2 }} +{{- end }} + {{- end }} \ No newline at end of file diff --git a/src/test/helm/network_policy_test.yaml b/src/test/helm/network_policy_test.yaml index ca1e231f226a1ba90507c40745960797a107b2a3..408efa3a3d89d13a5e0bafc292428f9325327990 100644 --- a/src/test/helm/network_policy_test.yaml +++ b/src/test/helm/network_policy_test.yaml @@ -148,6 +148,38 @@ tests: - ipBlock: cidr: 2.3.4.5/1 + - it: add egress rules by values + set: + networkPolicy: + additionalEgressConfig: + - to: + - ipBlock: + cidr: 1.1.1.1/32 + - to: + - podSelector: + matchLabels: + component: ozg-mongodb + ports: + - port: 27017 + protocol: TCP + asserts: + - contains: + path: spec.egress + content: + to: + - ipBlock: + cidr: 1.1.1.1/32 + - contains: + path: spec.egress + content: + to: + - podSelector: + matchLabels: + component: ozg-mongodb + ports: + - port: 27017 + protocol: TCP + - it: test network policy disabled set: networkPolicy: