Update CNV network policy (#903)

* Update CNV network policy * Update deploy/templates/nstemplatetiers/base/ns_stage.yaml Co-authored-by: Alexey Kazakov <[email protected]> --------- Co-authored-by: Alexey Kazakov <[email protected]> Co-authored-by: Francisc Munteanu <[email protected]>
codeready-toolchain · Oct 26, 2023 · 5d1faa7 · 5d1faa7
1 parent febf379
commit 5d1faa7
Show file tree

Hide file tree

Showing 3 changed files with 15 additions and 3 deletions.
diff --git a/deploy/templates/nstemplatetiers/base/ns_dev.yaml b/deploy/templates/nstemplatetiers/base/ns_dev.yaml
@@ -173,14 +173,18 @@ objects:
 - apiVersion: networking.k8s.io/v1
   kind: NetworkPolicy
   metadata:
-    name: allow-from-openshift-virtualization-os-images
+    name: allow-from-openshift-virtualization-namespaces
     namespace: ${SPACE_NAME}-dev
   spec:
     ingress:
     - from:
       - namespaceSelector:
           matchLabels:
             kubernetes.io/metadata.name: openshift-virtualization-os-images
+    - from:
+      - namespaceSelector:
+          matchLabels:
+            kubernetes.io/metadata.name: openshift-cnv
     podSelector: {}
     policyTypes:
     - Ingress

diff --git a/deploy/templates/nstemplatetiers/base/ns_stage.yaml b/deploy/templates/nstemplatetiers/base/ns_stage.yaml
@@ -173,14 +173,18 @@ objects:
 - apiVersion: networking.k8s.io/v1
   kind: NetworkPolicy
   metadata:
-    name: allow-from-openshift-virtualization-os-images
+    name: allow-from-openshift-virtualization-namespaces
     namespace: ${SPACE_NAME}-stage
   spec:
     ingress:
     - from:
       - namespaceSelector:
           matchLabels:
             kubernetes.io/metadata.name: openshift-virtualization-os-images
+    - from:
+      - namespaceSelector:
+          matchLabels:
+            kubernetes.io/metadata.name: openshift-cnv
     podSelector: {}
     policyTypes:
     - Ingress

diff --git a/deploy/templates/nstemplatetiers/base1ns/ns_dev.yaml b/deploy/templates/nstemplatetiers/base1ns/ns_dev.yaml
@@ -199,14 +199,18 @@ objects:
 - apiVersion: networking.k8s.io/v1
   kind: NetworkPolicy
   metadata:
-    name: allow-from-openshift-virtualization-os-images
+    name: allow-from-openshift-virtualization-namespaces
     namespace: ${SPACE_NAME}-dev
   spec:
     ingress:
     - from:
       - namespaceSelector:
           matchLabels:
             kubernetes.io/metadata.name: openshift-virtualization-os-images
+    - from:
+      - namespaceSelector:
+          matchLabels:
+            kubernetes.io/metadata.name: openshift-cnv
     podSelector: {}
     policyTypes:
     - Ingress