Skip to content

Conversation

@mhdawson
Copy link
Collaborator

Refs: https://issues.redhat.com/browse/APPENG-4057

  • add network policy to restrict access. It should ensure that
    • no external access other than slack endpoints
    • no access from other namespaces EXCEPT the knative-eventing namespace from which some specific pods have access
    • within same namespace no restrictionso
  • Update Makefile to show the correct SLACK urls given restricted access
  • Update action deployment with kind to specify that kind is being used through --set requestManagement.networkPolicies.platform=kind so that tests will still be able to run by not using openshift specific config

Refs: https://issues.redhat.com/browse/APPENG-4057

- add network policy to restrict access. It should ensure that
  - no external access other than slack endpoints
  - no access from other namespaces EXCEPT the knative-eventing
    namespace from which some specific pods have access
  - within same namespace no restrictionso
- Update Makefile to show the correct SLACK urls given
  restricted access
- Update action deployment with kind to specify that kind
  is being used through --set requestManagement.networkPolicies.platform=kind so
  that tests will still be able to run by not using openshift specific config

Signed-off-by: Michael Dawson <[email protected]>
Signed-off-by: Michael Dawson <[email protected]>
Signed-off-by: Michael Dawson <[email protected]>
Copy link
Contributor

@fax4ever fax4ever left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM, thanks @mhdawson

Co-authored-by: Tommy Hughes IV <[email protected]>
@tchughesiv tchughesiv merged commit a94c219 into RHEcosystemAppEng:main Nov 25, 2025
3 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants