lionsdev/unionflow-server-impl-quarkus-k1
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix: NetworkPolicy egress complet (Postgres + Keycloak + Kafka si besoin)

Browse Source
This commit is contained in:
dahoud
2026-04-22 15:50:25 +00:00
parent f9c4681abf
commit ed277efc08
2 changed files with 7 additions and 16 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
Chart.yaml
View File

@@ -16,7 +16,7 @@ sources:
- https://git.lions.dev/lionsdev/unionflow-server-impl-quarkus-k1 # ce repo (deploy) - https://git.lions.dev/lionsdev/unionflow-server-impl-quarkus-k1 # ce repo (deploy)
dependencies: dependencies:
- name: lions-app - name: lions-app
version: "1.0.2" version: "1.0.3"
repository: "https://git.lions.dev/api/packages/lionsdev/helm" repository: "https://git.lions.dev/api/packages/lionsdev/helm"
# Alternative pour dev local sans registry : # Alternative pour dev local sans registry :
# repository: "file://../helm-chart-lions-app" # repository: "file://../helm-chart-lions-app"

21
values.yaml
View File

@@ -127,11 +127,9 @@ lions-app:
# -------------------------------------------------------- # --------------------------------------------------------
# NetworkPolicy # NetworkPolicy
# TEMPORAIREMENT DÉSACTIVÉE : à reactiver après validation POC et affinage
# des règles egress (notamment egress vers node IP pour OIDC public URL)
# -------------------------------------------------------- # --------------------------------------------------------
networkPolicy: networkPolicy:
enabled: false enabled: true
allowIngressFrom: allowIngressFrom:
- namespaceSelector: - namespaceSelector:
kubernetes.io/metadata.name: ingress-nginx kubernetes.io/metadata.name: ingress-nginx
@@ -140,28 +138,21 @@ lions-app:
allowEgressDNS: true allowEgressDNS: true
allowEgressKubeAPI: true allowEgressKubeAPI: true
allowEgressTo: allowEgressTo:
# PostgreSQL
- namespaceSelector: - namespaceSelector:
kubernetes.io/metadata.name: postgresql kubernetes.io/metadata.name: postgresql
ports: ports:
- port: 5432 - port: 5432
protocol: TCP protocol: TCP
# Kafka
- namespaceSelector:
kubernetes.io/metadata.name: kafka
ports:
- port: 9092
protocol: TCP
# Keycloak
- namespaceSelector: - namespaceSelector:
kubernetes.io/metadata.name: keycloak kubernetes.io/metadata.name: keycloak
ports: ports:
- port: 8080 - port: 8080
protocol: TCP protocol: TCP
- namespaceSelector:
# -------------------------------------------------------- kubernetes.io/metadata.name: kafka
# Probes Quarkus SmallRye Health ports:
# -------------------------------------------------------- - port: 9092
protocol: TCP
probes: probes:
liveness: liveness:
enabled: true enabled: true