Added option to allow memgraph access on cilium network policy

charts/app-reverse-proxy/Chart.yaml

@@ -2,9 +2,9 @@ apiVersion: v2
 name: charts-app-reverse-proxy
 description: EcoVadis Helm chart for application exposed with nginx reverse proxy
 type: application
-version: 3.3.0
+version: 3.4.0
 appVersion: 1.16.0
 dependencies:
 - name: charts-core
-  version: 2.11.0
+  version: 2.12.0
   repository: "https://ecovadiscode.github.io/charts/"

charts/app-reverse-proxy/values.yaml

@@ -109,6 +109,7 @@ global:
   redisNetworkPolicyEnabled: true
   sqlNetworkPolicyEnabled: true
   servicebusNetworkPolicyEnabled: true
+  memgraphNetworkPolicyEnabled: false
 
   appConfigFilesEnabled: true
   appConfigFiles:

charts/core/Chart.yaml

@@ -2,4 +2,4 @@ apiVersion: v2
 name: charts-core
 description: A Helm chart for Kubernetes
 type: application
-version: 2.11.0
+version: 2.12.0

charts/core/templates/cilium-network-policy.yaml

@@ -142,6 +142,20 @@ spec:
             k8s:io.cilium.k8s.namespace.labels.environment: {{ .Values.global.monitoring.prometheusNamespace }}
   {{- end }}
 
+  {{- if .Values.global.memgraphNetworkPolicyEnabled }}
+    # --- memgraph (bolt) ---
+    #
+    # Memgraph runs in its own namespace, outside the environment label scheme,
+    # so the same-environment rule above does not cover it.
+    - toEndpoints:
+        - matchLabels:
+            k8s:io.kubernetes.pod.namespace: {{ .Values.global.memgraphNamespace | default "memgraph" }}
+      toPorts:
+        - ports:
+            - port: "7687"
+              protocol: TCP
+  {{- end }}
+
     # --- nodes and API server, all ports ---
     #
     # Node addresses resolve to host/remote-node and are never matched by a CIDR

charts/core/values.yaml

@@ -62,6 +62,7 @@ global:
   servicebusNetworkPolicyEnabled: true
   redisNetworkPolicyEnabled: true
   cosmosNetworkPolicyEnabled: false
+  memgraphNetworkPolicyEnabled: false
 
   service:
     enabled: true

charts/cron-job/Chart.yaml

@@ -2,8 +2,8 @@ apiVersion: v2
 description: EcoVadis Helm chart for K8s Cron Job
 name: charts-cron-job
 type: application
-version: 2.13.0
+version: 2.14.0
 dependencies:
 - name: charts-core
-  version: 2.11.0
+  version: 2.12.0
   repository: "https://ecovadiscode.github.io/charts/"

charts/cron-job/values.yaml

@@ -105,6 +105,7 @@ global:
   redisNetworkPolicyEnabled: true
   sqlNetworkPolicyEnabled: true
   servicebusNetworkPolicyEnabled: true
+  memgraphNetworkPolicyEnabled: false
 
   resources: {}
     # limits:

charts/dotnet-core/Chart.yaml

@@ -2,8 +2,8 @@ apiVersion: v2
 description: EcoVadis Helm chart for .Net Core app
 name: charts-dotnet-core
 type: application
-version: 4.13.0
+version: 4.14.0
 dependencies:
 - name: charts-core
-  version: "2.11.0"
+  version: "2.12.0"
   repository: "https://ecovadiscode.github.io/charts/"

charts/dotnet-core/values.yaml

@@ -128,6 +128,7 @@ global:
   redisNetworkPolicyEnabled: true
   sqlNetworkPolicyEnabled: true
   servicebusNetworkPolicyEnabled: true
+  memgraphNetworkPolicyEnabled: false
 
   resources: {}
     # limits:

charts/event-worker/Chart.yaml

@@ -2,8 +2,8 @@ apiVersion: v2
 description: EcoVadis Helm chart for K8s Event driven Deployment
 name: charts-event-worker
 type: application
-version: 1.9.0
+version: 1.10.0
 dependencies:
 - name: charts-core
-  version: 2.11.0
+  version: 2.12.0
   repository: "https://ecovadiscode.github.io/charts/"

charts/event-worker/values.yaml

@@ -68,6 +68,7 @@ global:
   redisNetworkPolicyEnabled: false
   sqlNetworkPolicyEnabled: true
   servicebusNetworkPolicyEnabled: true
+  memgraphNetworkPolicyEnabled: false
 
   resources: {}
     # limits:

charts/job/Chart.yaml

@@ -2,8 +2,8 @@ apiVersion: v2
 description: EcoVadis Helm chart for K8s Event driven Job
 name: charts-job
 type: application
-version: 2.11.0
+version: 2.12.0
 dependencies:
 - name: charts-core
-  version: 2.11.0
+  version: 2.12.0
   repository: "https://ecovadiscode.github.io/charts/"

charts/job/values.yaml

@@ -72,6 +72,7 @@ global:
   redisNetworkPolicyEnabled: true
   sqlNetworkPolicyEnabled: true
   servicebusNetworkPolicyEnabled: true
+  memgraphNetworkPolicyEnabled: false
 
   resources: {}
     # limits: