openstack/openstack-helm
Code Issues Proposed changes

Heat: Add ingress network policy overrides

Browse Source 
This patch set adds in default heat ingress overrides.

Change-Id: I4e1f2b6687a05f2bf3ca91c941c2cf11abe68f07
This commit is contained in:
sg774j 2019-09-30 09:21:01 -05:00 committed by Tin Lam
parent 915276f4f7
commit f76a3f5e0a
2 changed files with 27 additions and 21 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

39
heat/values_overrides/netpol.yaml
View File

@ -1,28 +1,25 @@
manifests: manifests:
network_policy: true network_policy: true
#NOTE(gagehugo): Test these once the netpol gate works
network_policy: network_policy:
heat: heat:
# ingress: ingress:
# - from: - from:
# - podSelector: - podSelector:
# matchLabels: matchLabels:
# application: heat application: heat
# - podSelector: - podSelector:
# matchLabels: matchLabels:
# application: ingress application: ingress
# - podSelector: - podSelector:
# matchLabels: matchLabels:
# application: horizon application: horizon
# ports: ports:
# - protocol: TCP - protocol: TCP
# port: 80 port: 8000
# - protocol: TCP - protocol: TCP
# port: 8000 port: 8003
# - protocol: TCP - protocol: TCP
# port: 8003 port: 8004
# - protocol: TCP
# port: 8004
egress: egress:
- to: - to:
- podSelector: - podSelector:

9
tools/deployment/common/test-networkpolicy.sh
View File

@ -93,6 +93,12 @@ else
test_netpol openstack rabbitmq server memcached.openstack.svc.cluster.local:11211 fail test_netpol openstack rabbitmq server memcached.openstack.svc.cluster.local:11211 fail
test_netpol openstack openvswitch openvswitch-vswitchd memcached.openstack.svc.cluster.local:11211 fail test_netpol openstack openvswitch openvswitch-vswitchd memcached.openstack.svc.cluster.local:11211 fail
test_netpol openstack libvirt libvirt memcached.openstack.svc.cluster.local:11211 fail test_netpol openstack libvirt libvirt memcached.openstack.svc.cluster.local:11211 fail
# Heat Negative Tests
test_netpol openstack keystone api heat-api.openstack.svc.cluster.local:8004 fail
test_netpol openstack nova os-api heat-api.openstack.svc.cluster.local:8004 fail
test_netpol openstack neutron server heat-api.openstack.svc.cluster.local:8004 fail
test_netpol openstack glance api heat-api.openstack.svc.cluster.local:8004 fail
# Positive Compute-Kit Tests # Positive Compute-Kit Tests
# Positive Mariadb tests # Positive Mariadb tests
@ -112,6 +118,9 @@ else
test_netpol openstack nova compute glance-api.openstack.svc.cluster.local:9292 success test_netpol openstack nova compute glance-api.openstack.svc.cluster.local:9292 success
test_netpol openstack heat api glance-api.openstack.svc.cluster.local:9292 success test_netpol openstack heat api glance-api.openstack.svc.cluster.local:9292 success
test_netpol openstack horizon server glance-api.openstack.svc.cluster.local:9292 success test_netpol openstack horizon server glance-api.openstack.svc.cluster.local:9292 success
test_netpol openstack horizon server heat-api.openstack.svc.cluster.local:8004 success
test_netpol openstack horizon server heat-cfn.openstack.svc.cluster.local:8000 success
test_netpol openstack heat api heat-api.openstack.svc.cluster.local:8004 success
fi fi
echo Test Success echo Test Success