mirror of
https://github.com/bjw-s-labs/helm-charts.git
synced 2025-07-04 17:07:04 +02:00
a01a89cb13
Co-authored-by: lab-assistant[bot] <180935599+lab-assistant[bot]@users.noreply.github.com>
56 lines
1.9 KiB
Smarty
56 lines
1.9 KiB
Smarty
{{/*
|
|
This template serves as a blueprint for all networkPolicy objects that are created
|
|
within the common library.
|
|
*/}}
|
|
{{- define "bjw-s.common.class.networkpolicy" -}}
|
|
{{- $rootContext := .rootContext -}}
|
|
{{- $networkPolicyObject := .object -}}
|
|
|
|
{{- $labels := merge
|
|
($networkPolicyObject.labels | default dict)
|
|
(include "bjw-s.common.lib.metadata.allLabels" $rootContext | fromYaml)
|
|
-}}
|
|
{{- $annotations := merge
|
|
($networkPolicyObject.annotations | default dict)
|
|
(include "bjw-s.common.lib.metadata.globalAnnotations" $rootContext | fromYaml)
|
|
-}}
|
|
{{- $podSelector := dict -}}
|
|
{{- if (hasKey $networkPolicyObject "podSelector") -}}
|
|
{{- $podSelector = $networkPolicyObject.podSelector -}}
|
|
{{- else -}}
|
|
{{- $podSelector = dict "matchLabels" (merge
|
|
($networkPolicyObject.extraSelectorLabels | default dict)
|
|
(dict "app.kubernetes.io/controller" $networkPolicyObject.controller)
|
|
(include "bjw-s.common.lib.metadata.selectorLabels" $rootContext | fromYaml)
|
|
) -}}
|
|
{{- end -}}
|
|
---
|
|
apiVersion: networking.k8s.io/v1
|
|
kind: NetworkPolicy
|
|
metadata:
|
|
name: {{ $networkPolicyObject.name }}
|
|
{{- with $labels }}
|
|
labels:
|
|
{{- range $key, $value := . }}
|
|
{{- printf "%s: %s" $key (tpl $value $rootContext | toYaml ) | nindent 4 }}
|
|
{{- end }}
|
|
{{- end }}
|
|
{{- with $annotations }}
|
|
annotations:
|
|
{{- range $key, $value := . }}
|
|
{{- printf "%s: %s" $key (tpl $value $rootContext | toYaml ) | nindent 4 }}
|
|
{{- end }}
|
|
{{- end }}
|
|
namespace: {{ $rootContext.Release.Namespace }}
|
|
spec:
|
|
podSelector: {{- toYaml $podSelector | nindent 4 }}
|
|
{{- with $networkPolicyObject.policyTypes }}
|
|
policyTypes: {{- toYaml . | nindent 4 -}}
|
|
{{- end }}
|
|
{{- with $networkPolicyObject.rules.ingress }}
|
|
ingress: {{- tpl (toYaml .) $rootContext | nindent 4 -}}
|
|
{{- end }}
|
|
{{- with $networkPolicyObject.rules.egress }}
|
|
egress: {{- tpl (toYaml .) $rootContext | nindent 4 -}}
|
|
{{- end }}
|
|
{{- end -}}
|