feat: Adding network policy for webapp-db

csye7125-fall2023-group05 · Nov 29, 2023 · 46ffae1 · 46ffae1
1 parent de3f58b
commit 46ffae1
Show file tree

Hide file tree

Showing 3 changed files with 31 additions and 0 deletions.
diff --git a/templates/_helpers.tpl b/templates/_helpers.tpl
@@ -38,6 +38,13 @@ app: {{ .Values.podLabel.app }}
 service: {{ .Values.podLabel.service }}
 {{- end }}
 
+{{/*
+DB labels
+*/}}
+{{- define "webapp-helm-chart.db.labels" }}
+app: {{ .Values.postgresql.primary.podLabels.app }}
+{{- end }}
+
 {{/*
 Selector labels
 */}}

diff --git a/templates/network_policy.yaml b/templates/network_policy.yaml
@@ -0,0 +1,20 @@
+apiVersion: networking.k8s.io/v1
+kind: NetworkPolicy
+metadata:
+  name: {{ .Release.Name }}-network-policy
+  namespace: {{ .Values.namespace }}
+spec:
+  podSelector:
+    matchLabels: {{ include "webapp-helm-chart.db.labels" . | indent 6 }}
+  policyTypes:
+    - Ingress
+  ingress:
+    - from:
+        - namespaceSelector:
+            matchLabels:
+              name: {{ .Values.namespace }}
+        - podSelector:
+            matchLabels: {{ include "webapp-helm-chart.labels" . | indent 14 }}
+      ports:
+        - protocol: TCP
+          port: 5432
diff --git a/values.yaml b/values.yaml
@@ -97,3 +97,7 @@ postgresql:
   primary:
     persistence:
       size: 1Gi
+    labels:
+      app: webapp-db
+    podLabels:
+      app: webapp-db