fix: make default network policy compatible with Cilium dataplane

charts/app-reverse-proxy/Chart.yaml

@@ -2,9 +2,9 @@ apiVersion: v2
 name: charts-app-reverse-proxy
 description: EcoVadis Helm chart for application exposed with nginx reverse proxy
 type: application
-version: 3.1.1
+version: 3.2.0
 appVersion: 1.16.0
 dependencies:
 - name: charts-core
-  version: 2.6.0
+  version: 2.9.0
   repository: "https://ecovadiscode.github.io/charts/"

charts/app-reverse-proxy/values.yaml

@@ -107,7 +107,6 @@ global:
   eventHubNetworkPolicyEnabled: false
   lnmElasticNetworkPolicyEnabled: false
   redisNetworkPolicyEnabled: true
-  redisCidr: "#{redisCidr}#"
   sqlNetworkPolicyEnabled: true
   servicebusNetworkPolicyEnabled: true
 

charts/core/Chart.yaml

@@ -2,4 +2,4 @@ apiVersion: v2
 name: charts-core
 description: A Helm chart for Kubernetes
 type: application
-version: 2.8.0
+version: 2.9.0

charts/core/templates/network-policy.yaml

@@ -37,6 +37,12 @@ spec:
     - from: #outside world - sentry, optimizely, etc
       - ipBlock:
           cidr: 0.0.0.0/0
+      # Cilium never matches Pod IPs through ipBlock, so without these peers
+      # in-cluster clients lose access to the ports below. Under NPM they change
+      # nothing: 0.0.0.0/0 already covers Pods. Reference:
+      # https://learn.microsoft.com/en-us/azure/aks/migrate-from-npm-to-cilium-network-policy
+      - namespaceSelector: {}
+      - podSelector: {}
       ports:
         - port: 443
         - port: 80
@@ -80,6 +86,12 @@ spec:
     - to: #outside world - sentry, optimizely, etc
         - ipBlock:
             cidr: 0.0.0.0/0
+        # Cilium never matches Pod IPs through ipBlock, so without these peers
+        # in-cluster destinations lose access to the ports below. Under NPM they
+        # change nothing: 0.0.0.0/0 already covers Pods.
+        # https://learn.microsoft.com/en-us/azure/aks/migrate-from-npm-to-cilium-network-policy
+        - namespaceSelector: {}
+        - podSelector: {}
       ports:
         - port: 443
         - port: 80

charts/core/values.yaml

@@ -62,9 +62,7 @@ global:
   servicebusNetworkPolicyEnabled: true
   redisNetworkPolicyEnabled: true
   cosmosNetworkPolicyEnabled: false
-
-  redisCidr: ""
-
+
   service:
     enabled: true
     type: ClusterIP

charts/cron-job/Chart.yaml

@@ -2,8 +2,8 @@ apiVersion: v2
 description: EcoVadis Helm chart for K8s Cron Job
 name: charts-cron-job
 type: application
-version: 2.11.1
+version: 2.12.0
 dependencies:
 - name: charts-core
-  version: 2.4.2
+  version: 2.9.0
   repository: "https://ecovadiscode.github.io/charts/"

charts/cron-job/values.yaml

@@ -103,7 +103,6 @@ global:
   eventHubNetworkPolicyEnabled: false
   lnmElasticNetworkPolicyEnabled: false
   redisNetworkPolicyEnabled: true
-  redisCidr: "#{redisCidr}#"
   sqlNetworkPolicyEnabled: true
   servicebusNetworkPolicyEnabled: true
 

charts/dotnet-core/Chart.yaml

@@ -2,8 +2,8 @@ apiVersion: v2
 description: EcoVadis Helm chart for .Net Core app
 name: charts-dotnet-core
 type: application
-version: 4.11.0
+version: 4.12.0
 dependencies:
 - name: charts-core
-  version: "2.8.0"
+  version: "2.9.0"
   repository: "https://ecovadiscode.github.io/charts/"

charts/dotnet-core/values.yaml

@@ -126,7 +126,6 @@ global:
   eventHubNetworkPolicyEnabled: false
   lnmElasticNetworkPolicyEnabled: false
   redisNetworkPolicyEnabled: true
-  redisCidr: "#{redisCidr}#"
   sqlNetworkPolicyEnabled: true
   servicebusNetworkPolicyEnabled: true
 

charts/event-worker/Chart.yaml

@@ -2,8 +2,8 @@ apiVersion: v2
 description: EcoVadis Helm chart for K8s Event driven Deployment
 name: charts-event-worker
 type: application
-version: 1.7.1
+version: 1.8.0
 dependencies:
 - name: charts-core
-  version: 2.7.0
+  version: 2.9.0
   repository: "https://ecovadiscode.github.io/charts/"

charts/event-worker/values.yaml

@@ -66,7 +66,6 @@ global:
   eventHubNetworkPolicyEnabled: false
   lnmElasticNetworkPolicyEnabled: false
   redisNetworkPolicyEnabled: false
-  redisCidr: "#{redisCidr}#"
   sqlNetworkPolicyEnabled: true
   servicebusNetworkPolicyEnabled: true
 

charts/job/Chart.yaml

@@ -2,8 +2,8 @@ apiVersion: v2
 description: EcoVadis Helm chart for K8s Event driven Job
 name: charts-job
 type: application
-version: 2.9.2
+version: 2.10.0
 dependencies:
 - name: charts-core
-  version: 2.4.2
+  version: 2.9.0
   repository: "https://ecovadiscode.github.io/charts/"

charts/job/values.yaml

@@ -70,7 +70,6 @@ global:
   eventHubNetworkPolicyEnabled: false
   lnmElasticNetworkPolicyEnabled: false
   redisNetworkPolicyEnabled: true
-  redisCidr: "#{redisCidr}#"
   sqlNetworkPolicyEnabled: true
   servicebusNetworkPolicyEnabled: true