diff --git a/charts/app-reverse-proxy/Chart.yaml b/charts/app-reverse-proxy/Chart.yaml index acbf924..a255372 100644 --- a/charts/app-reverse-proxy/Chart.yaml +++ b/charts/app-reverse-proxy/Chart.yaml @@ -2,9 +2,9 @@ apiVersion: v2 name: charts-app-reverse-proxy description: EcoVadis Helm chart for application exposed with nginx reverse proxy type: application -version: 3.1.1 +version: 3.2.0 appVersion: 1.16.0 dependencies: - name: charts-core - version: 2.6.0 + version: 2.9.0 repository: "https://ecovadiscode.github.io/charts/" diff --git a/charts/app-reverse-proxy/values.yaml b/charts/app-reverse-proxy/values.yaml index 78ff3f1..0bd5620 100644 --- a/charts/app-reverse-proxy/values.yaml +++ b/charts/app-reverse-proxy/values.yaml @@ -107,7 +107,6 @@ global: eventHubNetworkPolicyEnabled: false lnmElasticNetworkPolicyEnabled: false redisNetworkPolicyEnabled: true - redisCidr: "#{redisCidr}#" sqlNetworkPolicyEnabled: true servicebusNetworkPolicyEnabled: true diff --git a/charts/core/Chart.yaml b/charts/core/Chart.yaml index 44dfd1d..04a64da 100644 --- a/charts/core/Chart.yaml +++ b/charts/core/Chart.yaml @@ -2,4 +2,4 @@ apiVersion: v2 name: charts-core description: A Helm chart for Kubernetes type: application -version: 2.8.0 +version: 2.9.0 diff --git a/charts/core/templates/network-policy.yaml b/charts/core/templates/network-policy.yaml index a546a80..f676859 100644 --- a/charts/core/templates/network-policy.yaml +++ b/charts/core/templates/network-policy.yaml @@ -37,6 +37,12 @@ spec: - from: #outside world - sentry, optimizely, etc - ipBlock: cidr: 0.0.0.0/0 + # Cilium never matches Pod IPs through ipBlock, so without these peers + # in-cluster clients lose access to the ports below. Under NPM they change + # nothing: 0.0.0.0/0 already covers Pods. Reference: + # https://learn.microsoft.com/en-us/azure/aks/migrate-from-npm-to-cilium-network-policy + - namespaceSelector: {} + - podSelector: {} ports: - port: 443 - port: 80 @@ -80,6 +86,12 @@ spec: - to: #outside world - sentry, optimizely, etc - ipBlock: cidr: 0.0.0.0/0 + # Cilium never matches Pod IPs through ipBlock, so without these peers + # in-cluster destinations lose access to the ports below. Under NPM they + # change nothing: 0.0.0.0/0 already covers Pods. + # https://learn.microsoft.com/en-us/azure/aks/migrate-from-npm-to-cilium-network-policy + - namespaceSelector: {} + - podSelector: {} ports: - port: 443 - port: 80 diff --git a/charts/core/values.yaml b/charts/core/values.yaml index e508d94..ddcb469 100644 --- a/charts/core/values.yaml +++ b/charts/core/values.yaml @@ -62,9 +62,7 @@ global: servicebusNetworkPolicyEnabled: true redisNetworkPolicyEnabled: true cosmosNetworkPolicyEnabled: false - - redisCidr: "" - + service: enabled: true type: ClusterIP diff --git a/charts/cron-job/Chart.yaml b/charts/cron-job/Chart.yaml index 722b839..fa03d92 100644 --- a/charts/cron-job/Chart.yaml +++ b/charts/cron-job/Chart.yaml @@ -2,8 +2,8 @@ apiVersion: v2 description: EcoVadis Helm chart for K8s Cron Job name: charts-cron-job type: application -version: 2.11.1 +version: 2.12.0 dependencies: - name: charts-core - version: 2.4.2 + version: 2.9.0 repository: "https://ecovadiscode.github.io/charts/" \ No newline at end of file diff --git a/charts/cron-job/values.yaml b/charts/cron-job/values.yaml index 84262ec..c441548 100644 --- a/charts/cron-job/values.yaml +++ b/charts/cron-job/values.yaml @@ -103,7 +103,6 @@ global: eventHubNetworkPolicyEnabled: false lnmElasticNetworkPolicyEnabled: false redisNetworkPolicyEnabled: true - redisCidr: "#{redisCidr}#" sqlNetworkPolicyEnabled: true servicebusNetworkPolicyEnabled: true diff --git a/charts/dotnet-core/Chart.yaml b/charts/dotnet-core/Chart.yaml index bfb9d2a..eb4c217 100644 --- a/charts/dotnet-core/Chart.yaml +++ b/charts/dotnet-core/Chart.yaml @@ -2,8 +2,8 @@ apiVersion: v2 description: EcoVadis Helm chart for .Net Core app name: charts-dotnet-core type: application -version: 4.11.0 +version: 4.12.0 dependencies: - name: charts-core - version: "2.8.0" + version: "2.9.0" repository: "https://ecovadiscode.github.io/charts/" \ No newline at end of file diff --git a/charts/dotnet-core/values.yaml b/charts/dotnet-core/values.yaml index 51e5058..4b0ca7e 100644 --- a/charts/dotnet-core/values.yaml +++ b/charts/dotnet-core/values.yaml @@ -126,7 +126,6 @@ global: eventHubNetworkPolicyEnabled: false lnmElasticNetworkPolicyEnabled: false redisNetworkPolicyEnabled: true - redisCidr: "#{redisCidr}#" sqlNetworkPolicyEnabled: true servicebusNetworkPolicyEnabled: true diff --git a/charts/event-worker/Chart.yaml b/charts/event-worker/Chart.yaml index 3140a6c..6a14004 100644 --- a/charts/event-worker/Chart.yaml +++ b/charts/event-worker/Chart.yaml @@ -2,8 +2,8 @@ apiVersion: v2 description: EcoVadis Helm chart for K8s Event driven Deployment name: charts-event-worker type: application -version: 1.7.1 +version: 1.8.0 dependencies: - name: charts-core - version: 2.7.0 + version: 2.9.0 repository: "https://ecovadiscode.github.io/charts/" \ No newline at end of file diff --git a/charts/event-worker/values.yaml b/charts/event-worker/values.yaml index 07038e6..f62ee94 100644 --- a/charts/event-worker/values.yaml +++ b/charts/event-worker/values.yaml @@ -66,7 +66,6 @@ global: eventHubNetworkPolicyEnabled: false lnmElasticNetworkPolicyEnabled: false redisNetworkPolicyEnabled: false - redisCidr: "#{redisCidr}#" sqlNetworkPolicyEnabled: true servicebusNetworkPolicyEnabled: true diff --git a/charts/job/Chart.yaml b/charts/job/Chart.yaml index 23ba57f..930d1ad 100644 --- a/charts/job/Chart.yaml +++ b/charts/job/Chart.yaml @@ -2,8 +2,8 @@ apiVersion: v2 description: EcoVadis Helm chart for K8s Event driven Job name: charts-job type: application -version: 2.9.2 +version: 2.10.0 dependencies: - name: charts-core - version: 2.4.2 + version: 2.9.0 repository: "https://ecovadiscode.github.io/charts/" \ No newline at end of file diff --git a/charts/job/values.yaml b/charts/job/values.yaml index 5e17302..53dbb89 100644 --- a/charts/job/values.yaml +++ b/charts/job/values.yaml @@ -70,7 +70,6 @@ global: eventHubNetworkPolicyEnabled: false lnmElasticNetworkPolicyEnabled: false redisNetworkPolicyEnabled: true - redisCidr: "#{redisCidr}#" sqlNetworkPolicyEnabled: true servicebusNetworkPolicyEnabled: true