feat(network-policies): add auth network policies

sighupio · Nov 12, 2024 · 43c1433 · 43c1433
1 parent dd9174e
commit 43c1433
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 2 deletions.
diff --git a/templates/distribution/manifests/auth/policies/kustomization.yaml.tpl b/templates/distribution/manifests/auth/policies/kustomization.yaml.tpl
@@ -6,9 +6,9 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 
+{{- if eq .spec.distribution.modules.auth.provider.type "sso" }}
 resources:
   - common.yaml
-{{- if eq .spec.distribution.modules.auth.provider.type "sso" }}
   - acme-http-solver.yaml
   - pomerium.yaml
   - prometheus-metrics.yaml

diff --git a/templates/distribution/manifests/auth/policies/pomerium.yaml.tpl b/templates/distribution/manifests/auth/policies/pomerium.yaml.tpl
@@ -198,10 +198,12 @@ spec:
              kubernetes.io/metadata.name: logging
          podSelector:
            matchLabels:
-             app.kubernetes.io/name: opensearch
+             app: opensearch-dashboards
      ports:
        - port: 9200
          protocol: TCP
+       - port: 5601
+         protocol: TCP
 ---
 apiVersion: networking.k8s.io/v1
 kind: NetworkPolicy