Skip to content

feat(rhdh): add base NetworkPolicies for RHDH deployment [RHIDP-16476] #523

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
rm3l wants to merge 12 commits into
base: main
Choose a base branch
from
+582 −4
Open

feat(rhdh): add base NetworkPolicies for RHDH deployment [RHIDP-16476] #523

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
12 commits
Select commit Hold shift + click to select a range
2378706
feat(rhdh): add base NetworkPolicies for RHDH deployment [RHIDP-16476]
rm3l Sep 5, 2026
e753e87
fix(rhdh): fix helm lint YAML separator error in network-policies
rm3l Sep 5, 2026
90dc998
fix(rhdh): fix helm lint YAML separator error in network-policies
rm3l Sep 5, 2026
e4fd573
fix(rhdh): allow test-connection pod through NetworkPolicies
rm3l Sep 5, 2026
0ca53f0
fix(rhdh): allow backend ingress from test-connection pod
rm3l Sep 5, 2026
27c9ef7
chore(rhdh): add TODO and inline comments to orchestrator NPs
rm3l Sep 5, 2026
05ac8bc
feat(rhdh): add Redis egress rule (port 6379) to backend NPs
rm3l Sep 5, 2026
4125412
fix(rhdh): fix whitespace trimming merging allow-https-egress with se…
rm3l Sep 5, 2026
c9b6125
refactor(rhdh): use YAML comments instead of Go template comments in NPs
rm3l Sep 5, 2026
a654f04
fix(rhdh): add missing read replica ingress NP from primary
rm3l Sep 5, 2026
616ac88
Merge branch 'main' into RHIDP-16476--implement-base-networkpolicies-…
rm3l Sep 7, 2026
1cc9f34
fix(rhdh): allow metrics ingress from openshift-user-workload-monitoring
rm3l Sep 7, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion charts/rhdh/Chart.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
apiVersion: v2
name: redhat-developer-hub
type: application
version: 2.1.1
version: 2.2.0

@subhashkhileri subhashkhileri Sep 7, 2026

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

should this be a patch bump instead? if we are following the rhdh release version

@rm3l rm3l Sep 7, 2026

Copy link
Copy Markdown
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Just a coincidence actually :) It is required to bump the chart version whenever it changes in the upstream repo (so Helm chart-testing can test upgrades in CI). So we may be using a completely different version than RHDH.
But in the midstream pipelines, the chart version gets replaced to align with the RHDH version before packaging and shipping it.

@rm3l rm3l Sep 7, 2026

Copy link
Copy Markdown
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

So from a strict semver perspective, a minor bump makes sense in this upstream PR IMO.

appVersion: 2.1.0
annotations:
artifacthub.io/category: integration-delivery
Expand Down
6 changes: 3 additions & 3 deletions charts/rhdh/README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@

# RHDH Helm Chart for OpenShift and Kubernetes

![Version: 2.1.1](https://img.shields.io/badge/Version-2.1.1-informational?style=flat-square)
![Version: 2.2.0](https://img.shields.io/badge/Version-2.2.0-informational?style=flat-square)
![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square)

A Helm chart for deploying Red Hat Developer Hub, which is a Red Hat supported version of Backstage.
Expand Down Expand Up @@ -36,7 +36,7 @@ For the **Generally Available** version of this chart, see:
helm repo add bitnami https://charts.bitnami.com/bitnami
helm repo add redhat-developer https://redhat-developer.github.io/rhdh-chart

helm install my-rhdh redhat-developer/redhat-developer-hub --version 2.1.1
helm install my-rhdh redhat-developer/redhat-developer-hub --version 2.2.0
```

## Introduction
Expand Down Expand Up @@ -288,7 +288,7 @@ Kubernetes: `>= 1.31.0-0`
| podDisruptionBudget | Pod Disruption Budget configuration. | object | `{"create":false,"maxUnavailable":1,"minAvailable":""}` |
| podLabels | Labels to add to the pod. | object | `{}` |
| podSecurityContext | Pod-level security context. | object | `{}` |
| postgresql | Built-in PostgreSQL database (bitnami subchart). | object | `{"auth":{"secretKeys":{"adminPasswordKey":"postgres-password","userPasswordKey":"password"}},"enabled":true,"image":{"digest":"","registry":"quay.io","repository":"fedora/postgresql-15","tag":"latest"},"postgresqlDataDir":"/var/lib/pgsql/data/userdata","primary":{"containerSecurityContext":{"allowPrivilegeEscalation":false,"capabilities":{"drop":["ALL"]},"enabled":false},"extraEnvVars":[{"name":"POSTGRESQL_ADMIN_PASSWORD","valueFrom":{"secretKeyRef":{"key":"{{- include \"rhdh.postgresql.adminPasswordKey\" . }}","name":"{{- include \"rhdh.postgresql.secretName\" . }}"}}}],"persistence":{"enabled":true,"mountPath":"/var/lib/pgsql/data","size":"1Gi"},"podSecurityContext":{"enabled":false},"resources":{"limits":{"cpu":"250m","ephemeral-storage":"20Mi","memory":"1024Mi"},"requests":{"cpu":"250m","memory":"256Mi"}}},"serviceBindings":{"enabled":true}}` |
| postgresql | Built-in PostgreSQL database (bitnami subchart). | object | `{"auth":{"secretKeys":{"adminPasswordKey":"postgres-password","userPasswordKey":"password"}},"enabled":true,"image":{"digest":"","registry":"quay.io","repository":"fedora/postgresql-15","tag":"latest"},"postgresqlDataDir":"/var/lib/pgsql/data/userdata","primary":{"containerSecurityContext":{"allowPrivilegeEscalation":false,"capabilities":{"drop":["ALL"]},"enabled":false},"extraEnvVars":[{"name":"POSTGRESQL_ADMIN_PASSWORD","valueFrom":{"secretKeyRef":{"key":"{{- include \"rhdh.postgresql.adminPasswordKey\" . }}","name":"{{- include \"rhdh.postgresql.secretName\" . }}"}}}],"networkPolicy":{"enabled":false},"persistence":{"enabled":true,"mountPath":"/var/lib/pgsql/data","size":"1Gi"},"podSecurityContext":{"enabled":false},"resources":{"limits":{"cpu":"250m","ephemeral-storage":"20Mi","memory":"1024Mi"},"requests":{"cpu":"250m","memory":"256Mi"}}},"readReplicas":{"networkPolicy":{"enabled":false}},"serviceBindings":{"enabled":true}}` |
| preInitContainers | Init containers to run BEFORE the system init containers (e.g. inject auth credentials before install-dynamic-plugins runs). | list | `[]` |
| readinessProbe | Readiness probe configuration. | object | `{"failureThreshold":3,"httpGet":{"path":"/.backstage/health/v1/readiness","port":"backend","scheme":"HTTP"},"periodSeconds":10,"successThreshold":2,"timeoutSeconds":4}` |
| replicaCount | Number of desired pods. | int | `1` |
Expand Down
Loading
Loading