diff --git a/vcluster/chart/templates/allow-external-services.yaml b/vcluster/chart/templates/allow-external-services.yaml new file mode 100644 index 00000000..8f5e3a4f --- /dev/null +++ b/vcluster/chart/templates/allow-external-services.yaml @@ -0,0 +1,14 @@ +apiVersion: cilium.io/v2 +kind: CiliumNetworkPolicy +metadata: + name: allow-external-services + namespace: {{ .Release.Namespace }} +spec: + egress: + - toFQDNs: + - matchName: api.github.com + - matchName: dapr.github.io + - matchName: gitlab.com + - matchName: analytics.loft.rocks + endpointSelector: + matchLabels: {} diff --git a/vcluster/chart/templates/jaeger.yaml b/vcluster/chart/templates/jaeger.yaml index cbc93aa4..2e5febf1 100644 --- a/vcluster/chart/templates/jaeger.yaml +++ b/vcluster/chart/templates/jaeger.yaml @@ -1,5 +1,5 @@ apiVersion: jaegertracing.io/v1 -kind: "Jaeger" +kind: Jaeger metadata: name: jaeger namespace: {{ .Release.Namespace }} diff --git a/vcluster/chart/templates/vcluster.yaml b/vcluster/chart/templates/vcluster.yaml index f319123f..c2e023b8 100644 --- a/vcluster/chart/templates/vcluster.yaml +++ b/vcluster/chart/templates/vcluster.yaml @@ -48,7 +48,7 @@ spec: secretName: "{{ $fullname }}-tls" storage: - persistence: false + persistence: {{ .Values.persistence }} # coredns: # image: coredns/coredns:1.10.1 @@ -67,7 +67,6 @@ spec: to: "atlantis/{{ $name }}-archmeister-rw" - from: "{{ .Release.Namespace }}/jaeger-collector" to: "atlantis/jaeger-collector" - sync: secrets: all: true @@ -89,6 +88,9 @@ spec: - apiGroups: [ "cilium.io" ] resources: [ "ciliumnetworkpolicies" ] verbs: [ "get", "list", "watch", "create", "patch" ] + # - apiGroups: [ "jaegertracing.io" ] + # resources: [ "jaegers" ] + # verbs: [ "get", "list", "watch", "create", "patch" ] config: |- version: v1beta1 import: @@ -96,11 +98,15 @@ spec: apiVersion: postgresql.cnpg.io/v1 - kind: Secret apiVersion: v1 + # - kind: Jaeger + # apiVersion: jaegertracing.io/v1 # - kind: CiliumNetworkPolicy # apiVersion: cilium.io/v2 export: - kind: CiliumNetworkPolicy apiVersion: cilium.io/v2 + # - kind: Jaeger + # apiVersion: jaegertracing.io/v1 init: manifests: |- ---