From 5bf1225e2ead027fb3752035b0642876a26dde92 Mon Sep 17 00:00:00 2001 From: Aniruddh Jhavar Date: Fri, 27 Jun 2025 16:28:43 -0400 Subject: [PATCH 1/3] update flink ports --- .../egress/flink/bedrock-egress-ibm-flink-operand.yaml | 6 ++++++ .../flink/bedrock-access-to-ibm-flink-operand.yaml | 6 ++++++ .../flink/bedrock-access-to-ibm-flink-operator.yaml | 10 ++-------- 3 files changed, 14 insertions(+), 8 deletions(-) diff --git a/cp3-networkpolicy/egress/flink/bedrock-egress-ibm-flink-operand.yaml b/cp3-networkpolicy/egress/flink/bedrock-egress-ibm-flink-operand.yaml index 1161e50fe..aa1f4d294 100644 --- a/cp3-networkpolicy/egress/flink/bedrock-egress-ibm-flink-operand.yaml +++ b/cp3-networkpolicy/egress/flink/bedrock-egress-ibm-flink-operand.yaml @@ -27,6 +27,12 @@ spec: port: 8081 - protocol: TCP port: 9081 + - protocol: TCP + port: 6122 + - protocol: TCP + port: 6123 + - protocol: TCP + port: 6124 to: - podSelector: {} policyTypes: diff --git a/cp3-networkpolicy/ingress/flink/bedrock-access-to-ibm-flink-operand.yaml b/cp3-networkpolicy/ingress/flink/bedrock-access-to-ibm-flink-operand.yaml index 9b79a0c9c..c2ea98e1e 100644 --- a/cp3-networkpolicy/ingress/flink/bedrock-access-to-ibm-flink-operand.yaml +++ b/cp3-networkpolicy/ingress/flink/bedrock-access-to-ibm-flink-operand.yaml @@ -17,6 +17,12 @@ spec: port: 8081 - protocol: TCP port: 9081 + - protocol: TCP + port: 6122 + - protocol: TCP + port: 6123 + - protocol: TCP + port: 6124 from: - podSelector: {} policyTypes: diff --git a/cp3-networkpolicy/ingress/flink/bedrock-access-to-ibm-flink-operator.yaml b/cp3-networkpolicy/ingress/flink/bedrock-access-to-ibm-flink-operator.yaml index 40495f717..1dd897751 100644 --- a/cp3-networkpolicy/ingress/flink/bedrock-access-to-ibm-flink-operator.yaml +++ b/cp3-networkpolicy/ingress/flink/bedrock-access-to-ibm-flink-operator.yaml @@ -6,16 +6,10 @@ metadata: labels: component: cpfs3 spec: - podSelector: + podSelector: matchLabels: app.kubernetes.io/name: flink-kubernetes-operator ingress: - - ports: - - protocol: TCP - port: 443 - - protocol: TCP - port: 6443 - from: - - podSelector: {} + - {} policyTypes: - Ingress \ No newline at end of file From a982f804f06dae9a1eefdf5cd93cac545888b266 Mon Sep 17 00:00:00 2001 From: Aniruddh Jhavar Date: Fri, 27 Jun 2025 16:30:46 -0400 Subject: [PATCH 2/3] Revert "update flink ports" This reverts commit 5bf1225e2ead027fb3752035b0642876a26dde92. --- .../egress/flink/bedrock-egress-ibm-flink-operand.yaml | 6 ------ .../flink/bedrock-access-to-ibm-flink-operand.yaml | 6 ------ .../flink/bedrock-access-to-ibm-flink-operator.yaml | 10 ++++++++-- 3 files changed, 8 insertions(+), 14 deletions(-) diff --git a/cp3-networkpolicy/egress/flink/bedrock-egress-ibm-flink-operand.yaml b/cp3-networkpolicy/egress/flink/bedrock-egress-ibm-flink-operand.yaml index aa1f4d294..1161e50fe 100644 --- a/cp3-networkpolicy/egress/flink/bedrock-egress-ibm-flink-operand.yaml +++ b/cp3-networkpolicy/egress/flink/bedrock-egress-ibm-flink-operand.yaml @@ -27,12 +27,6 @@ spec: port: 8081 - protocol: TCP port: 9081 - - protocol: TCP - port: 6122 - - protocol: TCP - port: 6123 - - protocol: TCP - port: 6124 to: - podSelector: {} policyTypes: diff --git a/cp3-networkpolicy/ingress/flink/bedrock-access-to-ibm-flink-operand.yaml b/cp3-networkpolicy/ingress/flink/bedrock-access-to-ibm-flink-operand.yaml index c2ea98e1e..9b79a0c9c 100644 --- a/cp3-networkpolicy/ingress/flink/bedrock-access-to-ibm-flink-operand.yaml +++ b/cp3-networkpolicy/ingress/flink/bedrock-access-to-ibm-flink-operand.yaml @@ -17,12 +17,6 @@ spec: port: 8081 - protocol: TCP port: 9081 - - protocol: TCP - port: 6122 - - protocol: TCP - port: 6123 - - protocol: TCP - port: 6124 from: - podSelector: {} policyTypes: diff --git a/cp3-networkpolicy/ingress/flink/bedrock-access-to-ibm-flink-operator.yaml b/cp3-networkpolicy/ingress/flink/bedrock-access-to-ibm-flink-operator.yaml index 1dd897751..40495f717 100644 --- a/cp3-networkpolicy/ingress/flink/bedrock-access-to-ibm-flink-operator.yaml +++ b/cp3-networkpolicy/ingress/flink/bedrock-access-to-ibm-flink-operator.yaml @@ -6,10 +6,16 @@ metadata: labels: component: cpfs3 spec: - podSelector: + podSelector: matchLabels: app.kubernetes.io/name: flink-kubernetes-operator ingress: - - {} + - ports: + - protocol: TCP + port: 443 + - protocol: TCP + port: 6443 + from: + - podSelector: {} policyTypes: - Ingress \ No newline at end of file From b6716ba158f92125d1535bd1a32db8e2c8436b34 Mon Sep 17 00:00:00 2001 From: Aniruddh Jhavar Date: Thu, 17 Jul 2025 15:55:14 -0400 Subject: [PATCH 3/3] remove podselector to allow route --- .../ingress/flink/bedrock-access-to-ibm-flink-operand.yaml | 2 -- 1 file changed, 2 deletions(-) diff --git a/cp3-networkpolicy/ingress/flink/bedrock-access-to-ibm-flink-operand.yaml b/cp3-networkpolicy/ingress/flink/bedrock-access-to-ibm-flink-operand.yaml index c2ea98e1e..fce90c335 100644 --- a/cp3-networkpolicy/ingress/flink/bedrock-access-to-ibm-flink-operand.yaml +++ b/cp3-networkpolicy/ingress/flink/bedrock-access-to-ibm-flink-operand.yaml @@ -23,7 +23,5 @@ spec: port: 6123 - protocol: TCP port: 6124 - from: - - podSelector: {} policyTypes: - Ingress \ No newline at end of file