5057052c70
Currently using envsubst to perform substitution of value overrides in
the feature gate caused conflicts as gotpl gets templated into those
overrides. This adds in '%%%REPLACE_${var}%%%' and uses sed to perform
the substitution instead to address the issue.
This is to achieve parity with OSH-infra patch in [0].
[0] https://review.opendev.org/#/c/697749/
Depends-On: https://review.opendev.org/#/c/697749
Change-Id: I3ed504c65900e7b84728019f3acdf706a40c0427
Signed-off-by: Tin Lam <tlam@omegaprime.dev>
49 lines
1.1 KiB
YAML
49 lines
1.1 KiB
YAML
manifests:
|
|
network_policy: true
|
|
#NOTE(gagehugo): Test these once the netpol gate works
|
|
network_policy:
|
|
heat:
|
|
# ingress:
|
|
# - from:
|
|
# - podSelector:
|
|
# matchLabels:
|
|
# application: heat
|
|
# - podSelector:
|
|
# matchLabels:
|
|
# application: ingress
|
|
# - podSelector:
|
|
# matchLabels:
|
|
# application: horizon
|
|
# ports:
|
|
# - protocol: TCP
|
|
# port: 80
|
|
# - protocol: TCP
|
|
# port: 8000
|
|
# - protocol: TCP
|
|
# port: 8003
|
|
# - protocol: TCP
|
|
# port: 8004
|
|
egress:
|
|
- to:
|
|
- podSelector:
|
|
matchLabels:
|
|
application: neutron
|
|
- to:
|
|
- podSelector:
|
|
matchLabels:
|
|
application: nova
|
|
- to:
|
|
- podSelector:
|
|
matchLabels:
|
|
application: glance
|
|
- to:
|
|
- podSelector:
|
|
matchLabels:
|
|
application: cinder
|
|
- to:
|
|
- ipBlock:
|
|
cidr: %%%REPLACE_API_ADDR%%%/32
|
|
ports:
|
|
- protocol: TCP
|
|
port: %%%REPLACE_API_PORT%%%
|