After having created the helm template allowing any chart to inject Calico NetworkPolicy resources allowing egress to external services, we need to migrate a chart to this new way of defining firewalls in Kubernetes.
I volunteer the superset chart as tribute, as it has many egress policies defined in its helmfile values, and we'd greatly benefit from having them simplified.
| Status | Subtype | Assigned | Task | ||
|---|---|---|---|---|---|
| Open | brouberol | T331894 Improve how we address outside k8s infrastructure from within charts (e.g. network policies) | |||
| Resolved | brouberol | T359411 Migrate an example chart to the Calico network policies template |
Change 1009290 had a related patch set uploaded (by Brouberol; author: Brouberol):
[operations/deployment-charts@master] Superset: migrate external services egress to Calico network policies
Change 1009292 had a related patch set uploaded (by Brouberol; author: Brouberol):
[operations/puppet@production] global_config: add presto, druid and IDP node IPs to the kubernetes global config
Change #1009292 merged by Brouberol:
[operations/puppet@production] global_config: rework external services data structure
Change #1009290 merged by Brouberol:
[operations/deployment-charts@master] Superset: migrate external services egress to Calico network policies
Change #1013947 had a related patch set uploaded (by Brouberol; author: Brouberol):
[operations/deployment-charts@master] superset: Bump chart version
Change #1013947 merged by Brouberol:
[operations/deployment-charts@master] superset: Bump chart version
Both superset-staging and superset-production have been migrated to Calico NetworkPolicy resources. I checked that all database connection tested alright, and ran a couple of saved queries. Everything ran fine.