Skip to content

Allow configurable egress for server network policy#389

Merged
jasonodonnell merged 6 commits into
hashicorp:masterfrom
corest:allow-egress-configurable
Dec 16, 2020
Merged

Allow configurable egress for server network policy#389
jasonodonnell merged 6 commits into
hashicorp:masterfrom
corest:allow-egress-configurable

Conversation

@corest
Copy link
Copy Markdown
Contributor

@corest corest commented Sep 18, 2020

There are specific cases when the server pod needs to communicate with some external components.
E.g. when using various auth backends:

  • kubernetes - server needs to talk with k8s api
  • github - server needs to talk with github

@jasonodonnell jasonodonnell self-requested a review October 1, 2020 14:45
@jasonodonnell
Copy link
Copy Markdown
Contributor

jasonodonnell commented Oct 1, 2020

@corest Thanks for the contribution!

This use case makes sense but I wonder if we need to allow users to pass in whatever configurations they want for their egress.
For example, instead of egress being a boolean, we instead just take whatever YAML the operator wants to add. server.initContainers is a good example of this.

Using this design an operator can add whatever to rules they want for their environment and we don't need a bunch of very specific configurables.

Thoughts?

@corest
Copy link
Copy Markdown
Contributor Author

corest commented Oct 5, 2020

@jasonodonnell agree
Added test for egress templation

@jasonodonnell jasonodonnell merged commit f8e6aab into hashicorp:master Dec 16, 2020
@tvoran tvoran mentioned this pull request Jan 5, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants