Add Default Deny Network Policy #179
Merged
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
added 30 commits
November 22, 2021 23:20
This was
linked to
issues
Jan 12, 2022
|
Added support for the Run Command, as per our review @khowling
|
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
PR Summary
This PR example adds a default deny k8s manifest to the repo which is referenced by
The following application helm charts have been updated to have Network Policies (in order to work in a namespace with a default deny on egress/ingress).
Azure Vote
Java hello world
CertManagerIssuer
ExternalDns
The Azure Vote workflow has been extended to include a Playwright test to properly test the East-West traffic between the pods.
Other changes
Added an NSG rule to allow public 80/443 access when the AGW is not deployed with a privateIP.
Screengrabs
Other notes
Ridiculous number of commits in this branch, candidate for a squash-merge if I've ever seen one.
CI/CD
Full testing in the branch has happened.
https://github.com/Azure/Aks-Construction/actions/runs/1688055862
https://github.com/Azure/Aks-Construction/actions/runs/1687900578
PR Checklist
Closes #97
Closes #177