diff --git a/cp3-networkpolicy/egress/cert-manager/bedrock-egress-ibm-cert-manager-cainjector.yaml b/cp3-networkpolicy/egress/cert-manager/bedrock-egress-ibm-cert-manager-cainjector.yaml index adf9d7f70..9ccac4156 100644 --- a/cp3-networkpolicy/egress/cert-manager/bedrock-egress-ibm-cert-manager-cainjector.yaml +++ b/cp3-networkpolicy/egress/cert-manager/bedrock-egress-ibm-cert-manager-cainjector.yaml @@ -5,6 +5,7 @@ metadata: namespace: "certNamespace" labels: component: cpfs3 + service: ibm-cert-manager spec: egress: - ports: diff --git a/cp3-networkpolicy/egress/cert-manager/bedrock-egress-ibm-cert-manager-controller.yaml b/cp3-networkpolicy/egress/cert-manager/bedrock-egress-ibm-cert-manager-controller.yaml index ef4d049c6..190ba6aba 100644 --- a/cp3-networkpolicy/egress/cert-manager/bedrock-egress-ibm-cert-manager-controller.yaml +++ b/cp3-networkpolicy/egress/cert-manager/bedrock-egress-ibm-cert-manager-controller.yaml @@ -5,6 +5,7 @@ metadata: namespace: "certNamespace" labels: component: cpfs3 + service: ibm-cert-manager spec: egress: - ports: diff --git a/cp3-networkpolicy/egress/cert-manager/bedrock-egress-ibm-cert-manager-operator.yaml b/cp3-networkpolicy/egress/cert-manager/bedrock-egress-ibm-cert-manager-operator.yaml index 350ee3e5a..51e12c934 100644 --- a/cp3-networkpolicy/egress/cert-manager/bedrock-egress-ibm-cert-manager-operator.yaml +++ b/cp3-networkpolicy/egress/cert-manager/bedrock-egress-ibm-cert-manager-operator.yaml @@ -5,6 +5,7 @@ metadata: namespace: "certNamespace" labels: component: cpfs3 + service: ibm-cert-manager spec: egress: - ports: diff --git a/cp3-networkpolicy/egress/cert-manager/bedrock-egress-ibm-cert-manager-webhook.yaml b/cp3-networkpolicy/egress/cert-manager/bedrock-egress-ibm-cert-manager-webhook.yaml index f8f9bdda2..f40bee0ef 100644 --- a/cp3-networkpolicy/egress/cert-manager/bedrock-egress-ibm-cert-manager-webhook.yaml +++ b/cp3-networkpolicy/egress/cert-manager/bedrock-egress-ibm-cert-manager-webhook.yaml @@ -5,6 +5,7 @@ metadata: namespace: "certNamespace" labels: component: cpfs3 + service: ibm-cert-manager spec: egress: - ports: diff --git a/cp3-networkpolicy/egress/flink/bedrock-egress-ibm-flink-operand.yaml b/cp3-networkpolicy/egress/flink/bedrock-egress-ibm-flink-operand.yaml index aa1f4d294..b01431afa 100644 --- a/cp3-networkpolicy/egress/flink/bedrock-egress-ibm-flink-operand.yaml +++ b/cp3-networkpolicy/egress/flink/bedrock-egress-ibm-flink-operand.yaml @@ -5,6 +5,7 @@ metadata: namespace: "flinkNamespace" labels: component: cpfs3 + service: flink spec: podSelector: matchLabels: diff --git a/cp3-networkpolicy/egress/flink/bedrock-egress-ibm-flink-operator.yaml b/cp3-networkpolicy/egress/flink/bedrock-egress-ibm-flink-operator.yaml index f6642fdce..1058ccf05 100644 --- a/cp3-networkpolicy/egress/flink/bedrock-egress-ibm-flink-operator.yaml +++ b/cp3-networkpolicy/egress/flink/bedrock-egress-ibm-flink-operator.yaml @@ -5,6 +5,7 @@ metadata: namespace: "opNamespace" labels: component: cpfs3 + service: flink spec: podSelector: matchLabels: diff --git a/cp3-networkpolicy/egress/license-service-reporter/bedrock-egress-ibm-license-service-reporter-operator.yaml b/cp3-networkpolicy/egress/license-service-reporter/bedrock-egress-ibm-license-service-reporter-operator.yaml index e3841c82a..fddad31ff 100644 --- a/cp3-networkpolicy/egress/license-service-reporter/bedrock-egress-ibm-license-service-reporter-operator.yaml +++ b/cp3-networkpolicy/egress/license-service-reporter/bedrock-egress-ibm-license-service-reporter-operator.yaml @@ -5,6 +5,7 @@ metadata: namespace: "lsrNamespace" labels: component: cpfs3 + service: lsr spec: egress: - ports: diff --git a/cp3-networkpolicy/egress/license-service/bedrock-egress-ibm-licensing-operator.yaml b/cp3-networkpolicy/egress/license-service/bedrock-egress-ibm-licensing-operator.yaml index 66d78b4f6..ae33dcab4 100644 --- a/cp3-networkpolicy/egress/license-service/bedrock-egress-ibm-licensing-operator.yaml +++ b/cp3-networkpolicy/egress/license-service/bedrock-egress-ibm-licensing-operator.yaml @@ -5,6 +5,7 @@ metadata: namespace: "licNamespace" labels: component: cpfs3 + service: licensing spec: podSelector: matchLabels: diff --git a/cp3-networkpolicy/egress/license-service/bedrock-egress-ibm-licensing-service-instance.yaml b/cp3-networkpolicy/egress/license-service/bedrock-egress-ibm-licensing-service-instance.yaml index f1551b495..ddfdd54ff 100644 --- a/cp3-networkpolicy/egress/license-service/bedrock-egress-ibm-licensing-service-instance.yaml +++ b/cp3-networkpolicy/egress/license-service/bedrock-egress-ibm-licensing-service-instance.yaml @@ -5,6 +5,7 @@ metadata: namespace: "licNamespace" labels: component: cpfs3 + service: licensing spec: podSelector: matchLabels: diff --git a/cp3-networkpolicy/egress/opensearch/bedrock-egress-ibm-opensearch-operand.yaml b/cp3-networkpolicy/egress/opensearch/bedrock-egress-ibm-opensearch-operand.yaml index f8b6d3f7c..29ab43e0b 100644 --- a/cp3-networkpolicy/egress/opensearch/bedrock-egress-ibm-opensearch-operand.yaml +++ b/cp3-networkpolicy/egress/opensearch/bedrock-egress-ibm-opensearch-operand.yaml @@ -5,6 +5,7 @@ metadata: namespace: "opensearchNamespace" labels: component: cpfs3 + service: opensearch spec: podSelector: matchLabels: diff --git a/cp3-networkpolicy/egress/opensearch/bedrock-egress-ibm-opensearch-operator.yaml b/cp3-networkpolicy/egress/opensearch/bedrock-egress-ibm-opensearch-operator.yaml index de7f45d4c..49ed83611 100644 --- a/cp3-networkpolicy/egress/opensearch/bedrock-egress-ibm-opensearch-operator.yaml +++ b/cp3-networkpolicy/egress/opensearch/bedrock-egress-ibm-opensearch-operator.yaml @@ -5,6 +5,7 @@ metadata: namespace: "opNamespace" labels: component: cpfs3 + service: opensearch spec: podSelector: matchLabels: diff --git a/cp3-networkpolicy/egress/operators/bedrock-egress-cloud-native-postgresql.yaml b/cp3-networkpolicy/egress/operators/bedrock-egress-cloud-native-postgresql.yaml index b0856a22a..b46ed088a 100644 --- a/cp3-networkpolicy/egress/operators/bedrock-egress-cloud-native-postgresql.yaml +++ b/cp3-networkpolicy/egress/operators/bedrock-egress-cloud-native-postgresql.yaml @@ -5,6 +5,7 @@ metadata: namespace: "opNamespace" labels: component: cpfs3 + service: edb spec: podSelector: matchLabels: diff --git a/cp3-networkpolicy/egress/operators/bedrock-egress-egress-create-postgres-license-config.yaml b/cp3-networkpolicy/egress/operators/bedrock-egress-egress-create-postgres-license-config.yaml index 5d3e89fa6..164be57d8 100644 --- a/cp3-networkpolicy/egress/operators/bedrock-egress-egress-create-postgres-license-config.yaml +++ b/cp3-networkpolicy/egress/operators/bedrock-egress-egress-create-postgres-license-config.yaml @@ -5,6 +5,7 @@ metadata: namespace: "opNamespace" labels: component: cpfs3 + service: edb spec: podSelector: matchLabels: diff --git a/cp3-networkpolicy/egress/operators/bedrock-egress-ibm-bts-operator.yaml b/cp3-networkpolicy/egress/operators/bedrock-egress-ibm-bts-operator.yaml index 79705185c..83492d9e6 100644 --- a/cp3-networkpolicy/egress/operators/bedrock-egress-ibm-bts-operator.yaml +++ b/cp3-networkpolicy/egress/operators/bedrock-egress-ibm-bts-operator.yaml @@ -5,6 +5,7 @@ metadata: namespace: "opNamespace" labels: component: cpfs3 + service: bts spec: egress: - ports: diff --git a/cp3-networkpolicy/egress/operators/bedrock-egress-ibm-common-service-operator.yaml b/cp3-networkpolicy/egress/operators/bedrock-egress-ibm-common-service-operator.yaml index 3b10bc07e..f49857eaa 100644 --- a/cp3-networkpolicy/egress/operators/bedrock-egress-ibm-common-service-operator.yaml +++ b/cp3-networkpolicy/egress/operators/bedrock-egress-ibm-common-service-operator.yaml @@ -5,6 +5,7 @@ metadata: namespace: "opNamespace" labels: component: cpfs3 + service: cs spec: egress: - ports: diff --git a/cp3-networkpolicy/egress/operators/bedrock-egress-ibm-commonui-operator.yaml b/cp3-networkpolicy/egress/operators/bedrock-egress-ibm-commonui-operator.yaml index 3811b0a87..cc18fbe2e 100644 --- a/cp3-networkpolicy/egress/operators/bedrock-egress-ibm-commonui-operator.yaml +++ b/cp3-networkpolicy/egress/operators/bedrock-egress-ibm-commonui-operator.yaml @@ -5,6 +5,7 @@ metadata: namespace: "opNamespace" labels: component: cpfs3 + service: commonui spec: egress: - ports: diff --git a/cp3-networkpolicy/egress/operators/bedrock-egress-ibm-events-operator.yaml b/cp3-networkpolicy/egress/operators/bedrock-egress-ibm-events-operator.yaml index cca0088ed..2b828f958 100644 --- a/cp3-networkpolicy/egress/operators/bedrock-egress-ibm-events-operator.yaml +++ b/cp3-networkpolicy/egress/operators/bedrock-egress-ibm-events-operator.yaml @@ -5,6 +5,7 @@ metadata: namespace: "opNamespace" labels: component: cpfs3 + service: events spec: egress: - ports: diff --git a/cp3-networkpolicy/egress/operators/bedrock-egress-ibm-iam-operator.yaml b/cp3-networkpolicy/egress/operators/bedrock-egress-ibm-iam-operator.yaml index 946034ae1..0a73bb96f 100644 --- a/cp3-networkpolicy/egress/operators/bedrock-egress-ibm-iam-operator.yaml +++ b/cp3-networkpolicy/egress/operators/bedrock-egress-ibm-iam-operator.yaml @@ -5,6 +5,7 @@ metadata: namespace: "opNamespace" labels: component: cpfs3 + service: iam spec: egress: - to: diff --git a/cp3-networkpolicy/egress/operators/bedrock-egress-ibm-mongodb-operator.yaml b/cp3-networkpolicy/egress/operators/bedrock-egress-ibm-mongodb-operator.yaml index 17674a613..ebec40b31 100644 --- a/cp3-networkpolicy/egress/operators/bedrock-egress-ibm-mongodb-operator.yaml +++ b/cp3-networkpolicy/egress/operators/bedrock-egress-ibm-mongodb-operator.yaml @@ -5,6 +5,7 @@ metadata: namespace: "opNamespace" labels: component: cpfs3 + service: mongodb spec: egress: - ports: diff --git a/cp3-networkpolicy/egress/operators/bedrock-egress-ibm-namespace-scope-operator.yaml b/cp3-networkpolicy/egress/operators/bedrock-egress-ibm-namespace-scope-operator.yaml index d941d6554..12742cca2 100644 --- a/cp3-networkpolicy/egress/operators/bedrock-egress-ibm-namespace-scope-operator.yaml +++ b/cp3-networkpolicy/egress/operators/bedrock-egress-ibm-namespace-scope-operator.yaml @@ -5,6 +5,7 @@ metadata: namespace: "opNamespace" labels: component: cpfs3 + service: cs spec: egress: - ports: diff --git a/cp3-networkpolicy/egress/operators/bedrock-egress-operand-deployment-lifecycle-manager.yaml b/cp3-networkpolicy/egress/operators/bedrock-egress-operand-deployment-lifecycle-manager.yaml index bcb8fbc0e..75adee4b0 100644 --- a/cp3-networkpolicy/egress/operators/bedrock-egress-operand-deployment-lifecycle-manager.yaml +++ b/cp3-networkpolicy/egress/operators/bedrock-egress-operand-deployment-lifecycle-manager.yaml @@ -5,6 +5,7 @@ metadata: namespace: "opNamespace" labels: component: cpfs3 + service: cs spec: egress: - ports: diff --git a/cp3-networkpolicy/egress/operators/zen-egress-ibm-zen-operator.yaml b/cp3-networkpolicy/egress/operators/zen-egress-ibm-zen-operator.yaml index 77f7bbdac..86701ea26 100644 --- a/cp3-networkpolicy/egress/operators/zen-egress-ibm-zen-operator.yaml +++ b/cp3-networkpolicy/egress/operators/zen-egress-ibm-zen-operator.yaml @@ -5,6 +5,7 @@ metadata: namespace: "opNamespace" labels: component: cpfs3 + service: zen spec: egress: - to: diff --git a/cp3-networkpolicy/egress/operators/zen-egress-ibm-zen-setup-job.yaml b/cp3-networkpolicy/egress/operators/zen-egress-ibm-zen-setup-job.yaml index 6c3340469..f93da0049 100644 --- a/cp3-networkpolicy/egress/operators/zen-egress-ibm-zen-setup-job.yaml +++ b/cp3-networkpolicy/egress/operators/zen-egress-ibm-zen-setup-job.yaml @@ -5,6 +5,7 @@ metadata: namespace: "opNamespace" labels: component: cpfs3 + service: zen spec: podSelector: matchLabels: diff --git a/cp3-networkpolicy/egress/services/bedrock-egress-common-web-ui.yaml b/cp3-networkpolicy/egress/services/bedrock-egress-common-web-ui.yaml index 1a819d8e8..d579f7f08 100644 --- a/cp3-networkpolicy/egress/services/bedrock-egress-common-web-ui.yaml +++ b/cp3-networkpolicy/egress/services/bedrock-egress-common-web-ui.yaml @@ -3,6 +3,7 @@ kind: NetworkPolicy metadata: labels: component: cpfs3 + service: commonui name: egress-common-web-ui namespace: "csNamespace" spec: diff --git a/cp3-networkpolicy/egress/services/bedrock-egress-cs-keycloak.yaml b/cp3-networkpolicy/egress/services/bedrock-egress-cs-keycloak.yaml index fd8a0373d..7cb77a394 100644 --- a/cp3-networkpolicy/egress/services/bedrock-egress-cs-keycloak.yaml +++ b/cp3-networkpolicy/egress/services/bedrock-egress-cs-keycloak.yaml @@ -3,6 +3,7 @@ kind: NetworkPolicy metadata: labels: component: cpfs3 + service: keycloak name: egress-cs-keycloak namespace: "csNamespace" spec: diff --git a/cp3-networkpolicy/egress/services/bedrock-egress-edb-postgres.yaml b/cp3-networkpolicy/egress/services/bedrock-egress-edb-postgres.yaml index 17b38ba74..1b8881207 100644 --- a/cp3-networkpolicy/egress/services/bedrock-egress-edb-postgres.yaml +++ b/cp3-networkpolicy/egress/services/bedrock-egress-edb-postgres.yaml @@ -5,6 +5,7 @@ metadata: namespace: "csNamespace" labels: component: cpfs3 + service: edb spec: podSelector: matchExpressions: diff --git a/cp3-networkpolicy/egress/services/bedrock-egress-icp-mongodb.yaml b/cp3-networkpolicy/egress/services/bedrock-egress-icp-mongodb.yaml index a71e5a714..9bd59eb94 100644 --- a/cp3-networkpolicy/egress/services/bedrock-egress-icp-mongodb.yaml +++ b/cp3-networkpolicy/egress/services/bedrock-egress-icp-mongodb.yaml @@ -3,6 +3,7 @@ kind: NetworkPolicy metadata: labels: component: cpfs3 + service: mongodb name: egress-icp-mongodb namespace: "csNamespace" spec: diff --git a/cp3-networkpolicy/egress/services/bedrock-egress-oidc-client-registration.yaml b/cp3-networkpolicy/egress/services/bedrock-egress-oidc-client-registration.yaml index ff4166ee3..574a7546e 100644 --- a/cp3-networkpolicy/egress/services/bedrock-egress-oidc-client-registration.yaml +++ b/cp3-networkpolicy/egress/services/bedrock-egress-oidc-client-registration.yaml @@ -5,6 +5,7 @@ metadata: namespace: "csNamespace" labels: component: cpfs3 + service: iam spec: podSelector: matchLabels: diff --git a/cp3-networkpolicy/egress/services/bedrock-egress-platform-auth-service.yaml b/cp3-networkpolicy/egress/services/bedrock-egress-platform-auth-service.yaml index 57eb0feb8..01c58ba29 100644 --- a/cp3-networkpolicy/egress/services/bedrock-egress-platform-auth-service.yaml +++ b/cp3-networkpolicy/egress/services/bedrock-egress-platform-auth-service.yaml @@ -5,6 +5,7 @@ metadata: namespace: "csNamespace" labels: component: cpfs3 + service: iam spec: podSelector: matchLabels: diff --git a/cp3-networkpolicy/egress/services/bedrock-egress-platform-identity-management.yaml b/cp3-networkpolicy/egress/services/bedrock-egress-platform-identity-management.yaml index 7496af34d..0b808e4ce 100644 --- a/cp3-networkpolicy/egress/services/bedrock-egress-platform-identity-management.yaml +++ b/cp3-networkpolicy/egress/services/bedrock-egress-platform-identity-management.yaml @@ -5,6 +5,7 @@ metadata: namespace: "csNamespace" labels: component: cpfs3 + service: iam spec: podSelector: matchLabels: diff --git a/cp3-networkpolicy/egress/services/bedrock-egress-platform-identity-provider.yaml b/cp3-networkpolicy/egress/services/bedrock-egress-platform-identity-provider.yaml index 9b88e2b58..de121c4fb 100644 --- a/cp3-networkpolicy/egress/services/bedrock-egress-platform-identity-provider.yaml +++ b/cp3-networkpolicy/egress/services/bedrock-egress-platform-identity-provider.yaml @@ -5,6 +5,7 @@ metadata: namespace: "csNamespace" labels: component: cpfs3 + service: iam spec: podSelector: matchLabels: diff --git a/cp3-networkpolicy/egress/services/bedrock-egress-rhbk-operator.yaml b/cp3-networkpolicy/egress/services/bedrock-egress-rhbk-operator.yaml index 3f78f6c63..63e996178 100644 --- a/cp3-networkpolicy/egress/services/bedrock-egress-rhbk-operator.yaml +++ b/cp3-networkpolicy/egress/services/bedrock-egress-rhbk-operator.yaml @@ -5,6 +5,7 @@ metadata: namespace: "csNamespace" labels: component: cpfs3 + service: keycloak spec: egress: - ports: diff --git a/cp3-networkpolicy/egress/zen/zen-egress-create-secrets-job.yaml b/cp3-networkpolicy/egress/zen/zen-egress-create-secrets-job.yaml index 773cd6784..77bec2d83 100644 --- a/cp3-networkpolicy/egress/zen/zen-egress-create-secrets-job.yaml +++ b/cp3-networkpolicy/egress/zen/zen-egress-create-secrets-job.yaml @@ -5,6 +5,7 @@ metadata: namespace: "zenNamespace" labels: component: cpfs3 + service: zen spec: podSelector: matchLabels: diff --git a/cp3-networkpolicy/egress/zen/zen-egress-edb-postgres.yaml b/cp3-networkpolicy/egress/zen/zen-egress-edb-postgres.yaml index 4be4a46e7..d98c1777c 100644 --- a/cp3-networkpolicy/egress/zen/zen-egress-edb-postgres.yaml +++ b/cp3-networkpolicy/egress/zen/zen-egress-edb-postgres.yaml @@ -5,6 +5,7 @@ metadata: namespace: "zenNamespace" labels: component: cpfs3 + service: edb spec: podSelector: matchExpressions: diff --git a/cp3-networkpolicy/egress/zen/zen-egress-iam-config-job.yaml b/cp3-networkpolicy/egress/zen/zen-egress-iam-config-job.yaml index c9054ef2a..9d409b5c3 100644 --- a/cp3-networkpolicy/egress/zen/zen-egress-iam-config-job.yaml +++ b/cp3-networkpolicy/egress/zen/zen-egress-iam-config-job.yaml @@ -5,6 +5,7 @@ metadata: namespace: "zenNamespace" labels: component: cpfs3 + service: iam spec: podSelector: matchLabels: diff --git a/cp3-networkpolicy/egress/zen/zen-egress-nginx-tester.yaml b/cp3-networkpolicy/egress/zen/zen-egress-nginx-tester.yaml index cbab8ed38..dcd8ee4e9 100644 --- a/cp3-networkpolicy/egress/zen/zen-egress-nginx-tester.yaml +++ b/cp3-networkpolicy/egress/zen/zen-egress-nginx-tester.yaml @@ -5,6 +5,7 @@ metadata: namespace: "zenNamespace" labels: component: cpfs3 + service: zen spec: podSelector: matchLabels: diff --git a/cp3-networkpolicy/egress/zen/zen-egress-nginx.yaml b/cp3-networkpolicy/egress/zen/zen-egress-nginx.yaml index cc86c1ca1..77238c7d3 100644 --- a/cp3-networkpolicy/egress/zen/zen-egress-nginx.yaml +++ b/cp3-networkpolicy/egress/zen/zen-egress-nginx.yaml @@ -5,6 +5,7 @@ metadata: namespace: "zenNamespace" labels: component: cpfs3 + service: zen spec: podSelector: matchLabels: diff --git a/cp3-networkpolicy/egress/zen/zen-egress-usermgmt-ensure-tables-job.yaml b/cp3-networkpolicy/egress/zen/zen-egress-usermgmt-ensure-tables-job.yaml index 162320121..e8ddccc7b 100644 --- a/cp3-networkpolicy/egress/zen/zen-egress-usermgmt-ensure-tables-job.yaml +++ b/cp3-networkpolicy/egress/zen/zen-egress-usermgmt-ensure-tables-job.yaml @@ -5,6 +5,7 @@ metadata: namespace: "zenNamespace" labels: component: cpfs3 + service: zen spec: podSelector: matchLabels: diff --git a/cp3-networkpolicy/egress/zen/zen-egress-usermgmt.yaml b/cp3-networkpolicy/egress/zen/zen-egress-usermgmt.yaml index 3fd93c7e6..42f48fe52 100644 --- a/cp3-networkpolicy/egress/zen/zen-egress-usermgmt.yaml +++ b/cp3-networkpolicy/egress/zen/zen-egress-usermgmt.yaml @@ -5,6 +5,7 @@ metadata: namespace: "zenNamespace" labels: component: cpfs3 + service: zen spec: podSelector: matchLabels: diff --git a/cp3-networkpolicy/egress/zen/zen-egress-zen-core-api.yaml b/cp3-networkpolicy/egress/zen/zen-egress-zen-core-api.yaml index a9fe67aa5..5d913eeaa 100644 --- a/cp3-networkpolicy/egress/zen/zen-egress-zen-core-api.yaml +++ b/cp3-networkpolicy/egress/zen/zen-egress-zen-core-api.yaml @@ -5,6 +5,7 @@ metadata: namespace: "zenNamespace" labels: component: cpfs3 + service: zen spec: podSelector: matchLabels: diff --git a/cp3-networkpolicy/egress/zen/zen-egress-zen-core-create-tables-job.yaml b/cp3-networkpolicy/egress/zen/zen-egress-zen-core-create-tables-job.yaml index 74e0b9436..e4cf49b46 100644 --- a/cp3-networkpolicy/egress/zen/zen-egress-zen-core-create-tables-job.yaml +++ b/cp3-networkpolicy/egress/zen/zen-egress-zen-core-create-tables-job.yaml @@ -5,6 +5,7 @@ metadata: namespace: "zenNamespace" labels: component: cpfs3 + service: zen spec: podSelector: matchLabels: diff --git a/cp3-networkpolicy/egress/zen/zen-egress-zen-core-pre-requisite-job.yaml b/cp3-networkpolicy/egress/zen/zen-egress-zen-core-pre-requisite-job.yaml index 6d6d9094d..0164f9f07 100644 --- a/cp3-networkpolicy/egress/zen/zen-egress-zen-core-pre-requisite-job.yaml +++ b/cp3-networkpolicy/egress/zen/zen-egress-zen-core-pre-requisite-job.yaml @@ -5,6 +5,7 @@ metadata: namespace: "zenNamespace" labels: component: cpfs3 + service: zen spec: podSelector: matchLabels: diff --git a/cp3-networkpolicy/egress/zen/zen-egress-zen-core.yaml b/cp3-networkpolicy/egress/zen/zen-egress-zen-core.yaml index ae81822bd..24e902585 100644 --- a/cp3-networkpolicy/egress/zen/zen-egress-zen-core.yaml +++ b/cp3-networkpolicy/egress/zen/zen-egress-zen-core.yaml @@ -5,6 +5,7 @@ metadata: namespace: "zenNamespace" labels: component: cpfs3 + service: zen spec: podSelector: matchLabels: diff --git a/cp3-networkpolicy/egress/zen/zen-egress-zen-metastore-backup-cron-job.yaml b/cp3-networkpolicy/egress/zen/zen-egress-zen-metastore-backup-cron-job.yaml index dea514554..49612fda2 100644 --- a/cp3-networkpolicy/egress/zen/zen-egress-zen-metastore-backup-cron-job.yaml +++ b/cp3-networkpolicy/egress/zen/zen-egress-zen-metastore-backup-cron-job.yaml @@ -5,6 +5,7 @@ metadata: namespace: "zenNamespace" labels: component: cpfs3 + service: zen spec: podSelector: matchLabels: diff --git a/cp3-networkpolicy/egress/zen/zen-egress-zen-metastoredb-init-job.yaml b/cp3-networkpolicy/egress/zen/zen-egress-zen-metastoredb-init-job.yaml index 623b559ed..efebdf4fe 100644 --- a/cp3-networkpolicy/egress/zen/zen-egress-zen-metastoredb-init-job.yaml +++ b/cp3-networkpolicy/egress/zen/zen-egress-zen-metastoredb-init-job.yaml @@ -5,6 +5,7 @@ metadata: namespace: "zenNamespace" labels: component: cpfs3 + service: zen spec: podSelector: matchLabels: diff --git a/cp3-networkpolicy/egress/zen/zen-egress-zen-metastoredb.yaml b/cp3-networkpolicy/egress/zen/zen-egress-zen-metastoredb.yaml index 48c739019..b1b9cc9cd 100644 --- a/cp3-networkpolicy/egress/zen/zen-egress-zen-metastoredb.yaml +++ b/cp3-networkpolicy/egress/zen/zen-egress-zen-metastoredb.yaml @@ -5,6 +5,7 @@ metadata: namespace: "zenNamespace" labels: component: cpfs3 + service: zen spec: podSelector: matchLabels: diff --git a/cp3-networkpolicy/egress/zen/zen-egress-zen-minio-create-buckets-job.yaml b/cp3-networkpolicy/egress/zen/zen-egress-zen-minio-create-buckets-job.yaml index d146ba6de..675cf9a52 100644 --- a/cp3-networkpolicy/egress/zen/zen-egress-zen-minio-create-buckets-job.yaml +++ b/cp3-networkpolicy/egress/zen/zen-egress-zen-minio-create-buckets-job.yaml @@ -5,6 +5,7 @@ metadata: namespace: "zenNamespace" labels: component: cpfs3 + service: zen spec: podSelector: matchLabels: diff --git a/cp3-networkpolicy/egress/zen/zen-egress-zen-minio.yaml b/cp3-networkpolicy/egress/zen/zen-egress-zen-minio.yaml index 25a1c7b8e..16c2f5eed 100644 --- a/cp3-networkpolicy/egress/zen/zen-egress-zen-minio.yaml +++ b/cp3-networkpolicy/egress/zen/zen-egress-zen-minio.yaml @@ -5,6 +5,7 @@ metadata: namespace: "zenNamespace" labels: component: cpfs3 + service: zen spec: podSelector: matchLabels: diff --git a/cp3-networkpolicy/egress/zen/zen-egress-zen-pre-requisite-job.yaml b/cp3-networkpolicy/egress/zen/zen-egress-zen-pre-requisite-job.yaml index d6b4f5a1c..2e135cbc9 100644 --- a/cp3-networkpolicy/egress/zen/zen-egress-zen-pre-requisite-job.yaml +++ b/cp3-networkpolicy/egress/zen/zen-egress-zen-pre-requisite-job.yaml @@ -5,6 +5,7 @@ metadata: namespace: "zenNamespace" labels: component: cpfs3 + service: zen spec: podSelector: matchLabels: diff --git a/cp3-networkpolicy/egress/zen/zen-egress-zen-remote-svc-inst-status-cron-job.yaml b/cp3-networkpolicy/egress/zen/zen-egress-zen-remote-svc-inst-status-cron-job.yaml index fd7059f7b..9e1dff197 100644 --- a/cp3-networkpolicy/egress/zen/zen-egress-zen-remote-svc-inst-status-cron-job.yaml +++ b/cp3-networkpolicy/egress/zen/zen-egress-zen-remote-svc-inst-status-cron-job.yaml @@ -3,6 +3,7 @@ kind: NetworkPolicy metadata: labels: component: cpfs3 + service: zen name: egress-zen-remote-svc-inst-status-cron-job namespace: "zenNamespace" spec: diff --git a/cp3-networkpolicy/egress/zen/zen-egress-zen-svc-inst-status-cron-job.yaml b/cp3-networkpolicy/egress/zen/zen-egress-zen-svc-inst-status-cron-job.yaml index fd7a06d40..6bf4efdcf 100644 --- a/cp3-networkpolicy/egress/zen/zen-egress-zen-svc-inst-status-cron-job.yaml +++ b/cp3-networkpolicy/egress/zen/zen-egress-zen-svc-inst-status-cron-job.yaml @@ -3,6 +3,7 @@ kind: NetworkPolicy metadata: labels: component: cpfs3 + service: zen name: egress-zen-svc-inst-status-cron-job namespace: "zenNamespace" spec: diff --git a/cp3-networkpolicy/egress/zen/zen-egress-zen-validate-metastore-edb-connection-job.yaml b/cp3-networkpolicy/egress/zen/zen-egress-zen-validate-metastore-edb-connection-job.yaml index 4259b3bea..6a53d5ab3 100644 --- a/cp3-networkpolicy/egress/zen/zen-egress-zen-validate-metastore-edb-connection-job.yaml +++ b/cp3-networkpolicy/egress/zen/zen-egress-zen-validate-metastore-edb-connection-job.yaml @@ -5,6 +5,7 @@ metadata: namespace: "zenNamespace" labels: component: cpfs3 + service: zen spec: podSelector: matchLabels: diff --git a/cp3-networkpolicy/egress/zen/zen-egress-zen-watchdog-create-tables-job.yaml b/cp3-networkpolicy/egress/zen/zen-egress-zen-watchdog-create-tables-job.yaml index 0021ec824..7326f7036 100644 --- a/cp3-networkpolicy/egress/zen/zen-egress-zen-watchdog-create-tables-job.yaml +++ b/cp3-networkpolicy/egress/zen/zen-egress-zen-watchdog-create-tables-job.yaml @@ -3,6 +3,7 @@ kind: NetworkPolicy metadata: labels: component: cpfs3 + service: zen name: egress-zen-watchdog-create-tables-job namespace: "zenNamespace" spec: diff --git a/cp3-networkpolicy/egress/zen/zen-egress-zen-watchdog-post-requisite-job.yaml b/cp3-networkpolicy/egress/zen/zen-egress-zen-watchdog-post-requisite-job.yaml index 0f6db2eaf..f0d12c7c5 100644 --- a/cp3-networkpolicy/egress/zen/zen-egress-zen-watchdog-post-requisite-job.yaml +++ b/cp3-networkpolicy/egress/zen/zen-egress-zen-watchdog-post-requisite-job.yaml @@ -3,6 +3,7 @@ kind: NetworkPolicy metadata: labels: component: cpfs3 + service: zen name: egress-zen-watchdog-post-requisite-job namespace: "zenNamespace" spec: diff --git a/cp3-networkpolicy/egress/zen/zen-egress-zen-watchdog-pre-requisite-job.yaml b/cp3-networkpolicy/egress/zen/zen-egress-zen-watchdog-pre-requisite-job.yaml index a3c4381dd..db0a17ba2 100644 --- a/cp3-networkpolicy/egress/zen/zen-egress-zen-watchdog-pre-requisite-job.yaml +++ b/cp3-networkpolicy/egress/zen/zen-egress-zen-watchdog-pre-requisite-job.yaml @@ -3,6 +3,7 @@ kind: NetworkPolicy metadata: labels: component: cpfs3 + service: zen name: egress-zen-watchdog-pre-requisite-job namespace: "zenNamespace" spec: diff --git a/cp3-networkpolicy/egress/zen/zen-egress-zen-watcher.yaml b/cp3-networkpolicy/egress/zen/zen-egress-zen-watcher.yaml index 9bedbd715..7b3cb3cc3 100644 --- a/cp3-networkpolicy/egress/zen/zen-egress-zen-watcher.yaml +++ b/cp3-networkpolicy/egress/zen/zen-egress-zen-watcher.yaml @@ -5,6 +5,7 @@ metadata: namespace: "zenNamespace" labels: component: cpfs3 + service: zen spec: podSelector: matchLabels: diff --git a/cp3-networkpolicy/ingress/cert-manager/bedrock-access-to-cert-manager-webhook.yaml b/cp3-networkpolicy/ingress/cert-manager/bedrock-access-to-cert-manager-webhook.yaml index 759c60ab3..bbdbb97e0 100644 --- a/cp3-networkpolicy/ingress/cert-manager/bedrock-access-to-cert-manager-webhook.yaml +++ b/cp3-networkpolicy/ingress/cert-manager/bedrock-access-to-cert-manager-webhook.yaml @@ -5,6 +5,7 @@ metadata: namespace: "certNamespace" labels: component: cpfs3 + service: cert-manager spec: podSelector: matchLabels: diff --git a/cp3-networkpolicy/ingress/cert-manager/olm-access-to-cert-manager-catalog.yaml b/cp3-networkpolicy/ingress/cert-manager/olm-access-to-cert-manager-catalog.yaml index 80f147f98..6e46af2b4 100644 --- a/cp3-networkpolicy/ingress/cert-manager/olm-access-to-cert-manager-catalog.yaml +++ b/cp3-networkpolicy/ingress/cert-manager/olm-access-to-cert-manager-catalog.yaml @@ -5,6 +5,7 @@ metadata: namespace: "certNamespace" labels: component: cpfs3 + service: cert-manager spec: podSelector: {} ingress: diff --git a/cp3-networkpolicy/ingress/flink/bedrock-access-to-ibm-flink-operand.yaml b/cp3-networkpolicy/ingress/flink/bedrock-access-to-ibm-flink-operand.yaml index c2ea98e1e..974878317 100644 --- a/cp3-networkpolicy/ingress/flink/bedrock-access-to-ibm-flink-operand.yaml +++ b/cp3-networkpolicy/ingress/flink/bedrock-access-to-ibm-flink-operand.yaml @@ -5,6 +5,7 @@ metadata: namespace: "flinkNamespace" labels: component: cpfs3 + service: flink spec: podSelector: matchLabels: diff --git a/cp3-networkpolicy/ingress/flink/bedrock-access-to-ibm-flink-operator.yaml b/cp3-networkpolicy/ingress/flink/bedrock-access-to-ibm-flink-operator.yaml index 1dd897751..7e36fbb9f 100644 --- a/cp3-networkpolicy/ingress/flink/bedrock-access-to-ibm-flink-operator.yaml +++ b/cp3-networkpolicy/ingress/flink/bedrock-access-to-ibm-flink-operator.yaml @@ -5,6 +5,7 @@ metadata: namespace: "opNamespace" labels: component: cpfs3 + service: flink spec: podSelector: matchLabels: diff --git a/cp3-networkpolicy/ingress/license-service-reporter/bedrock-access-to-license-service-reporter.yaml b/cp3-networkpolicy/ingress/license-service-reporter/bedrock-access-to-license-service-reporter.yaml index fa4efe49a..1735659e5 100644 --- a/cp3-networkpolicy/ingress/license-service-reporter/bedrock-access-to-license-service-reporter.yaml +++ b/cp3-networkpolicy/ingress/license-service-reporter/bedrock-access-to-license-service-reporter.yaml @@ -5,6 +5,7 @@ metadata: namespace: "lsrNamespace" labels: component: cpfs3 + service: lsr spec: podSelector: matchLabels: diff --git a/cp3-networkpolicy/ingress/license-service-reporter/olm-access-to-license-sesrvice-reporter-catalog.yaml b/cp3-networkpolicy/ingress/license-service-reporter/olm-access-to-license-sesrvice-reporter-catalog.yaml index 28287f091..255bc138f 100644 --- a/cp3-networkpolicy/ingress/license-service-reporter/olm-access-to-license-sesrvice-reporter-catalog.yaml +++ b/cp3-networkpolicy/ingress/license-service-reporter/olm-access-to-license-sesrvice-reporter-catalog.yaml @@ -5,6 +5,7 @@ metadata: namespace: "lsrNamespace" labels: component: cpfs3 + service: lsr spec: podSelector: {} ingress: diff --git a/cp3-networkpolicy/ingress/license-service/bedrock-access-to-license-service.yaml b/cp3-networkpolicy/ingress/license-service/bedrock-access-to-license-service.yaml index a4f7eecc7..4c2803d04 100644 --- a/cp3-networkpolicy/ingress/license-service/bedrock-access-to-license-service.yaml +++ b/cp3-networkpolicy/ingress/license-service/bedrock-access-to-license-service.yaml @@ -5,6 +5,7 @@ metadata: namespace: "licNamespace" labels: component: cpfs3 + service: licensing spec: podSelector: matchLabels: diff --git a/cp3-networkpolicy/ingress/license-service/olm-access-to-license-service-catalog.yaml b/cp3-networkpolicy/ingress/license-service/olm-access-to-license-service-catalog.yaml index 234d7db54..0a4458c3d 100644 --- a/cp3-networkpolicy/ingress/license-service/olm-access-to-license-service-catalog.yaml +++ b/cp3-networkpolicy/ingress/license-service/olm-access-to-license-service-catalog.yaml @@ -5,6 +5,7 @@ metadata: namespace: "licNamespace" labels: component: cpfs3 + service: licensing spec: podSelector: {} ingress: diff --git a/cp3-networkpolicy/ingress/opensearch/bedrock-access-to-ibm-elasticsearch-operand.yaml b/cp3-networkpolicy/ingress/opensearch/bedrock-access-to-ibm-elasticsearch-operand.yaml index 5d265d704..70c43295e 100644 --- a/cp3-networkpolicy/ingress/opensearch/bedrock-access-to-ibm-elasticsearch-operand.yaml +++ b/cp3-networkpolicy/ingress/opensearch/bedrock-access-to-ibm-elasticsearch-operand.yaml @@ -5,6 +5,7 @@ metadata: namespace: "opensearchNamespace" labels: component: cpfs3 + service: opensearch spec: podSelector: matchLabels: diff --git a/cp3-networkpolicy/ingress/opensearch/bedrock-access-to-ibm-opensearch-operand.yaml b/cp3-networkpolicy/ingress/opensearch/bedrock-access-to-ibm-opensearch-operand.yaml index 20f90476e..848e29210 100644 --- a/cp3-networkpolicy/ingress/opensearch/bedrock-access-to-ibm-opensearch-operand.yaml +++ b/cp3-networkpolicy/ingress/opensearch/bedrock-access-to-ibm-opensearch-operand.yaml @@ -5,6 +5,7 @@ metadata: namespace: "opensearchNamespace" labels: component: cpfs3 + service: opensearch spec: podSelector: matchLabels: diff --git a/cp3-networkpolicy/ingress/opensearch/bedrock-access-to-ibm-opensearch-operator.yaml b/cp3-networkpolicy/ingress/opensearch/bedrock-access-to-ibm-opensearch-operator.yaml index 8ebf97664..df0a654eb 100644 --- a/cp3-networkpolicy/ingress/opensearch/bedrock-access-to-ibm-opensearch-operator.yaml +++ b/cp3-networkpolicy/ingress/opensearch/bedrock-access-to-ibm-opensearch-operator.yaml @@ -5,6 +5,7 @@ metadata: namespace: "opNamespace" labels: component: cpfs3 + service: opensearch spec: podSelector: matchLabels: diff --git a/cp3-networkpolicy/ingress/operators/access-to-edb-postgres-webhooks.yaml b/cp3-networkpolicy/ingress/operators/access-to-edb-postgres-webhooks.yaml index 449acf579..625756beb 100644 --- a/cp3-networkpolicy/ingress/operators/access-to-edb-postgres-webhooks.yaml +++ b/cp3-networkpolicy/ingress/operators/access-to-edb-postgres-webhooks.yaml @@ -3,6 +3,7 @@ kind: NetworkPolicy metadata: labels: component: cpfs3 + service: edb name: access-to-edb-postgres-webhooks namespace: "opNamespace" spec: diff --git a/cp3-networkpolicy/ingress/operators/access-to-ibm-common-service-operator.yaml b/cp3-networkpolicy/ingress/operators/access-to-ibm-common-service-operator.yaml index 349b79358..25ee39d30 100644 --- a/cp3-networkpolicy/ingress/operators/access-to-ibm-common-service-operator.yaml +++ b/cp3-networkpolicy/ingress/operators/access-to-ibm-common-service-operator.yaml @@ -3,6 +3,7 @@ kind: NetworkPolicy metadata: labels: component: cpfs3 + service: cs name: access-to-ibm-common-service-operator namespace: "opNamespace" spec: diff --git a/cp3-networkpolicy/ingress/operators/access-to-zen-meta-api.yaml b/cp3-networkpolicy/ingress/operators/access-to-zen-meta-api.yaml index 9978c952c..c8973209d 100644 --- a/cp3-networkpolicy/ingress/operators/access-to-zen-meta-api.yaml +++ b/cp3-networkpolicy/ingress/operators/access-to-zen-meta-api.yaml @@ -3,6 +3,7 @@ kind: NetworkPolicy metadata: labels: component: cpfs3 + service: zen name: access-to-zen-meta-api namespace: "opNamespace" spec: diff --git a/cp3-networkpolicy/ingress/operators/olm-access-to-bedrock-catalog.yaml b/cp3-networkpolicy/ingress/operators/olm-access-to-bedrock-catalog.yaml index f9c099c10..9dc5aa148 100644 --- a/cp3-networkpolicy/ingress/operators/olm-access-to-bedrock-catalog.yaml +++ b/cp3-networkpolicy/ingress/operators/olm-access-to-bedrock-catalog.yaml @@ -5,6 +5,7 @@ metadata: namespace: "opNamespace" labels: component: cpfs3 + service: cs spec: podSelector: {} ingress: diff --git a/cp3-networkpolicy/ingress/services/access-to-common-web-ui.yaml b/cp3-networkpolicy/ingress/services/access-to-common-web-ui.yaml index 7d7579dfe..a03477301 100644 --- a/cp3-networkpolicy/ingress/services/access-to-common-web-ui.yaml +++ b/cp3-networkpolicy/ingress/services/access-to-common-web-ui.yaml @@ -3,6 +3,7 @@ kind: NetworkPolicy metadata: labels: component: cpfs3 + service: commonui name: access-to-common-web-ui namespace: "csNamespace" spec: diff --git a/cp3-networkpolicy/ingress/services/access-to-edb-postgres.yaml b/cp3-networkpolicy/ingress/services/access-to-edb-postgres.yaml index bd9ec32fe..d2d5e9d18 100644 --- a/cp3-networkpolicy/ingress/services/access-to-edb-postgres.yaml +++ b/cp3-networkpolicy/ingress/services/access-to-edb-postgres.yaml @@ -3,6 +3,7 @@ kind: NetworkPolicy metadata: labels: component: cpfs3 + service: edb name: access-to-edb-postgres namespace: "csNamespace" spec: diff --git a/cp3-networkpolicy/ingress/services/access-to-icp-mongodb.yaml b/cp3-networkpolicy/ingress/services/access-to-icp-mongodb.yaml index a7ec6e06f..5dfb4b853 100644 --- a/cp3-networkpolicy/ingress/services/access-to-icp-mongodb.yaml +++ b/cp3-networkpolicy/ingress/services/access-to-icp-mongodb.yaml @@ -3,6 +3,7 @@ kind: NetworkPolicy metadata: labels: component: cpfs3 + service: mongo name: access-to-icp-mongodb namespace: "csNamespace" spec: diff --git a/cp3-networkpolicy/ingress/services/access-to-platform-auth-service.yaml b/cp3-networkpolicy/ingress/services/access-to-platform-auth-service.yaml index bbbd07e63..ae66c7b7f 100644 --- a/cp3-networkpolicy/ingress/services/access-to-platform-auth-service.yaml +++ b/cp3-networkpolicy/ingress/services/access-to-platform-auth-service.yaml @@ -3,6 +3,7 @@ kind: NetworkPolicy metadata: labels: component: cpfs3 + service: iam name: access-to-platform-auth-service namespace: "csNamespace" spec: diff --git a/cp3-networkpolicy/ingress/services/access-to-platform-identity-management.yaml b/cp3-networkpolicy/ingress/services/access-to-platform-identity-management.yaml index a1d37b10d..1c9bfb308 100644 --- a/cp3-networkpolicy/ingress/services/access-to-platform-identity-management.yaml +++ b/cp3-networkpolicy/ingress/services/access-to-platform-identity-management.yaml @@ -3,6 +3,7 @@ kind: NetworkPolicy metadata: labels: component: cpfs3 + service: iam name: access-to-platform-identity-management namespace: "csNamespace" spec: diff --git a/cp3-networkpolicy/ingress/services/access-to-platform-identity-provider.yaml b/cp3-networkpolicy/ingress/services/access-to-platform-identity-provider.yaml index 81d838390..4eaf7d27d 100644 --- a/cp3-networkpolicy/ingress/services/access-to-platform-identity-provider.yaml +++ b/cp3-networkpolicy/ingress/services/access-to-platform-identity-provider.yaml @@ -3,6 +3,7 @@ kind: NetworkPolicy metadata: labels: component: cpfs3 + service: iam name: access-to-platform-identity-provider namespace: "csNamespace" spec: diff --git a/cp3-networkpolicy/ingress/services/access-to-usage-metering-service.yaml b/cp3-networkpolicy/ingress/services/access-to-usage-metering-service.yaml index 0dc733200..f3072eda9 100644 --- a/cp3-networkpolicy/ingress/services/access-to-usage-metering-service.yaml +++ b/cp3-networkpolicy/ingress/services/access-to-usage-metering-service.yaml @@ -5,6 +5,7 @@ metadata: namespace: "csNamespace" labels: component: cpfs3 + service: ums spec: podSelector: matchLabels: diff --git a/cp3-networkpolicy/ingress/zen/access-to-edb-postgres.yaml b/cp3-networkpolicy/ingress/zen/access-to-edb-postgres.yaml index 288b43894..244edf69d 100644 --- a/cp3-networkpolicy/ingress/zen/access-to-edb-postgres.yaml +++ b/cp3-networkpolicy/ingress/zen/access-to-edb-postgres.yaml @@ -3,6 +3,7 @@ kind: NetworkPolicy metadata: labels: component: cpfs3 + service: zen name: access-to-edb-postgres namespace: "zenNamespace" spec: diff --git a/cp3-networkpolicy/ingress/zen/zen-access-to-audit-svc.yaml b/cp3-networkpolicy/ingress/zen/zen-access-to-audit-svc.yaml index 7a1c5012a..f2fef9a23 100644 --- a/cp3-networkpolicy/ingress/zen/zen-access-to-audit-svc.yaml +++ b/cp3-networkpolicy/ingress/zen/zen-access-to-audit-svc.yaml @@ -5,6 +5,7 @@ metadata: namespace: "zenNamespace" labels: component: cpfs3 + service: zen spec: podSelector: matchLabels: diff --git a/cp3-networkpolicy/ingress/zen/zen-access-to-nginx.yaml b/cp3-networkpolicy/ingress/zen/zen-access-to-nginx.yaml index 4d9f34692..8c7095995 100644 --- a/cp3-networkpolicy/ingress/zen/zen-access-to-nginx.yaml +++ b/cp3-networkpolicy/ingress/zen/zen-access-to-nginx.yaml @@ -5,6 +5,7 @@ metadata: namespace: "zenNamespace" labels: component: cpfs3 + service: zen spec: podSelector: matchLabels: diff --git a/cp3-networkpolicy/ingress/zen/zen-access-to-usermgmt.yaml b/cp3-networkpolicy/ingress/zen/zen-access-to-usermgmt.yaml index 9ad6dde13..f32af059f 100644 --- a/cp3-networkpolicy/ingress/zen/zen-access-to-usermgmt.yaml +++ b/cp3-networkpolicy/ingress/zen/zen-access-to-usermgmt.yaml @@ -5,6 +5,7 @@ metadata: namespace: "zenNamespace" labels: component: cpfs3 + service: zen spec: podSelector: matchLabels: diff --git a/cp3-networkpolicy/ingress/zen/zen-access-to-zen-core-api.yaml b/cp3-networkpolicy/ingress/zen/zen-access-to-zen-core-api.yaml index e6863aa6f..89a883301 100644 --- a/cp3-networkpolicy/ingress/zen/zen-access-to-zen-core-api.yaml +++ b/cp3-networkpolicy/ingress/zen/zen-access-to-zen-core-api.yaml @@ -5,6 +5,7 @@ metadata: namespace: "zenNamespace" labels: component: cpfs3 + service: zen spec: podSelector: matchLabels: diff --git a/cp3-networkpolicy/ingress/zen/zen-access-to-zen-core.yaml b/cp3-networkpolicy/ingress/zen/zen-access-to-zen-core.yaml index def7da216..a744cfe15 100644 --- a/cp3-networkpolicy/ingress/zen/zen-access-to-zen-core.yaml +++ b/cp3-networkpolicy/ingress/zen/zen-access-to-zen-core.yaml @@ -5,6 +5,7 @@ metadata: namespace: "zenNamespace" labels: component: cpfs3 + service: zen spec: podSelector: matchLabels: diff --git a/cp3-networkpolicy/ingress/zen/zen-access-to-zen-minio.yaml b/cp3-networkpolicy/ingress/zen/zen-access-to-zen-minio.yaml index 296b4350d..1ebff40a0 100644 --- a/cp3-networkpolicy/ingress/zen/zen-access-to-zen-minio.yaml +++ b/cp3-networkpolicy/ingress/zen/zen-access-to-zen-minio.yaml @@ -5,6 +5,7 @@ metadata: namespace: "zenNamespace" labels: component: cpfs3 + service: zen spec: podSelector: matchLabels: diff --git a/cp3-networkpolicy/ingress/zen/zen-access-to-zen-volumes.yaml b/cp3-networkpolicy/ingress/zen/zen-access-to-zen-volumes.yaml index d7697e391..b4bac900f 100644 --- a/cp3-networkpolicy/ingress/zen/zen-access-to-zen-volumes.yaml +++ b/cp3-networkpolicy/ingress/zen/zen-access-to-zen-volumes.yaml @@ -5,6 +5,7 @@ metadata: namespace: "zenNamespace" labels: component: cpfs3 + service: zen spec: podSelector: matchLabels: diff --git a/cp3-networkpolicy/ingress/zen/zen-access-to-zen-watchdog.yaml b/cp3-networkpolicy/ingress/zen/zen-access-to-zen-watchdog.yaml index 31d569d10..fc1061e4a 100644 --- a/cp3-networkpolicy/ingress/zen/zen-access-to-zen-watchdog.yaml +++ b/cp3-networkpolicy/ingress/zen/zen-access-to-zen-watchdog.yaml @@ -5,6 +5,7 @@ metadata: namespace: "zenNamespace" labels: component: cpfs3 + service: zen spec: podSelector: matchLabels: diff --git a/cp3-networkpolicy/ingress/zen/zen-allow-iam-config-job.yaml b/cp3-networkpolicy/ingress/zen/zen-allow-iam-config-job.yaml index 868a40ee3..d3de8e71b 100644 --- a/cp3-networkpolicy/ingress/zen/zen-allow-iam-config-job.yaml +++ b/cp3-networkpolicy/ingress/zen/zen-allow-iam-config-job.yaml @@ -5,6 +5,7 @@ metadata: namespace: "zenNamespace" labels: component: cpfs3 + service: zen spec: podSelector: matchLabels: diff --git a/cp3-networkpolicy/install_networkpolicy.sh b/cp3-networkpolicy/install_networkpolicy.sh index 6e3bcee65..bbff5d354 100755 --- a/cp3-networkpolicy/install_networkpolicy.sh +++ b/cp3-networkpolicy/install_networkpolicy.sh @@ -41,6 +41,12 @@ OPENSEARCH_NAMESPACE= # is uninstall flag? UNINSTALL= +# skip IAM network policies flag +SKIP_IAM=false + +# skip Zen network policies flag +SKIP_ZEN=false + IFS=' ' @@ -117,6 +123,8 @@ function print_usage() { echo " -opensearch, --opensearch-namespace string Opensearch namespace. No default value" echo " -u, --uninstall Uninstall both ingress and egress IBM Common Services Network Policies" echo " -e, --egress Deploy egress NetworkPolicies. Without this option, only ingress NetworkPolicies are deployed" + echo " --skipIAM Skip installing network policies with for IAM services, Default is false" + echo " --skipZen Skip installing network policies with for Zen services. Default is false" echo " -h, --help Print usage information" echo "" } @@ -163,6 +171,12 @@ function parse_arguments() { -e | --egress) EGRESS=true ;; + --skipIAM) + SKIP_IAM=true + ;; + --skipZen) + SKIP_ZEN=true + ;; -h | --help) print_usage exit 1 @@ -176,6 +190,22 @@ function parse_arguments() { # ---------- Supporting functions ---------- +function should_skip_policy() { + local policyfile=$1 + + # Check if policy contains 'service: iam' label and SKIP_IAM is set + if [[ ${SKIP_IAM} == "true" ]] && grep -q "service: iam" "${policyfile}"; then + return 0 # Skip this policy + fi + + # Check if policy contains 'service: zen' label and SKIP_ZEN is set + if [[ ${SKIP_ZEN} == "true" ]] && grep -q "service: zen" "${policyfile}"; then + return 0 # Skip this policy + fi + + return 1 # Don't skip this policy +} + function check_prereqs() { title "[$(translate_step ${STEP})] Checking prerequisites ..." msg "-----------------------------------------------------------------------" @@ -274,6 +304,14 @@ function install_networkpolicy() { info "Using license-service-reporter namespace: ${LICSVC_REPORTER_NAMESPACE}" info "Using flink namespace: ${FLINK_NAMESPACE}" info "Using opensearch namespace: ${OPENSEARCH_NAMESPACE}" + + if [[ ${SKIP_IAM} == "true" ]]; then + info "Skipping networkpolicies for IAM services" + fi + + if [[ ${SKIP_ZEN} == "true" ]]; then + info "Skipping networkpolicies for Zen services" + fi if [[ ${EGRESS} == "true" ]]; then BASE_DIR="${BASE_DIR}/egress" @@ -283,6 +321,10 @@ function install_networkpolicy() { if [[ ! -z "${CS_NAMESPACE}" ]]; then for policyfile in `ls -1 ${BASE_DIR}/services/*.yaml`; do + if should_skip_policy "${policyfile}"; then + info "Skipping `basename ${policyfile}` due to skip flags ..." + continue + fi info "Installing `basename ${policyfile}` ..." cat ${policyfile} | sed -e "s/csNamespace/${CS_NAMESPACE}/g" | sed -e "s/opNamespace/${OPERATORS_NAMESPACE}/g" | sed -e "s/zenNamespace/${ZEN_NAMESPACE}/g" | oc apply -f - done @@ -290,6 +332,10 @@ function install_networkpolicy() { if [[ ! -z "${OPERATORS_NAMESPACE}" ]]; then for policyfile in `ls -1 ${BASE_DIR}/operators/*.yaml`; do + if should_skip_policy "${policyfile}"; then + info "Skipping `basename ${policyfile}` due to skip flags ..." + continue + fi info "Installing `basename ${policyfile}` ..." cat ${policyfile} | sed -e "s/csNamespace/${CS_NAMESPACE}/g" | sed -e "s/opNamespace/${OPERATORS_NAMESPACE}/g" | sed -e "s/zenNamespace/${ZEN_NAMESPACE}/g" | oc apply -f - done @@ -298,6 +344,10 @@ function install_networkpolicy() { # Installing cert-manager policies if [[ ! -z "${CERT_NAMESPACE}" ]]; then for policyfile in `ls -1 ${BASE_DIR}/cert-manager/*.yaml`; do + if should_skip_policy "${policyfile}"; then + info "Skipping `basename ${policyfile}` due to skip flags ..." + continue + fi info "Installing `basename ${policyfile}` ..." cat ${policyfile} | sed -e "s/certNamespace/${CERT_NAMESPACE}/g" | oc apply -f - done @@ -306,6 +356,10 @@ function install_networkpolicy() { # Installing license-service policies if [[ ! -z "${LICSVC_NAMESPACE}" ]]; then for policyfile in `ls -1 ${BASE_DIR}/license-service/*.yaml`; do + if should_skip_policy "${policyfile}"; then + info "Skipping `basename ${policyfile}` due to skip flags ..." + continue + fi info "Installing `basename ${policyfile}` ..." cat ${policyfile} | sed -e "s/licNamespace/${LICSVC_NAMESPACE}/g" | oc apply -f - done @@ -314,6 +368,10 @@ function install_networkpolicy() { # Installing license-service-reporter policies if [[ ! -z "${LICSVC_REPORTER_NAMESPACE}" ]]; then for policyfile in `ls -1 ${BASE_DIR}/license-service-reporter/*.yaml`; do + if should_skip_policy "${policyfile}"; then + info "Skipping `basename ${policyfile}` due to skip flags ..." + continue + fi info "Installing `basename ${policyfile}` ..." cat ${policyfile} | sed -e "s/lsrNamespace/${LICSVC_REPORTER_NAMESPACE}/g" | oc apply -f - done @@ -323,6 +381,10 @@ function install_networkpolicy() { # Installing flink policies if [[ ! -z "${FLINK_NAMESPACE}" ]]; then for policyfile in `ls -1 ${BASE_DIR}/flink/*.yaml`; do + if should_skip_policy "${policyfile}"; then + info "Skipping `basename ${policyfile}` due to skip flags ..." + continue + fi info "Installing `basename ${policyfile}` ..." cat ${policyfile} | sed -e "s/flinkNamespace/${FLINK_NAMESPACE}/g" | sed -e "s/opNamespace/${OPERATORS_NAMESPACE}/g" | oc apply -f - done @@ -332,6 +394,10 @@ function install_networkpolicy() { # Installing opensearch policies if [[ ! -z "${OPENSEARCH_NAMESPACE}" ]]; then for policyfile in `ls -1 ${BASE_DIR}/opensearch/*.yaml`; do + if should_skip_policy "${policyfile}"; then + info "Skipping `basename ${policyfile}` due to skip flags ..." + continue + fi info "Installing `basename ${policyfile}` ..." cat ${policyfile} | sed -e "s/opensearchNamespace/${OPENSEARCH_NAMESPACE}/g" | sed -e "s/opNamespace/${OPERATORS_NAMESPACE}/g" | oc apply -f - done @@ -340,6 +406,10 @@ function install_networkpolicy() { # Installing zen policies if [[ ! -z "${ZEN_NAMESPACE}" ]]; then for policyfile in `ls -1 ${BASE_DIR}/zen/*.yaml`; do + if should_skip_policy "${policyfile}"; then + info "Skipping `basename ${policyfile}` due to skip flags ..." + continue + fi info "Installing `basename ${policyfile}` ..." cat ${policyfile} | sed -e "s/zenNamespace/${ZEN_NAMESPACE}/g" | sed -e "s/csNamespace/${CS_NAMESPACE}/g" | sed -e "s/opNamespace/${OPERATORS_NAMESPACE}/g" | oc apply -f - done @@ -351,36 +421,51 @@ function delete_networkpolicy() { title "[$(translate_step ${STEP})] Removing IBM Common Services Network Policies ..." msg "-----------------------------------------------------------------------" + # Build selector based on skip flags + local selector="component=cpfs3" + + if [[ ${SKIP_IAM} == "true" ]]; then + selector="${selector},service!=iam" + fi + + if [[ ${SKIP_ZEN} == "true" ]]; then + selector="${selector},service!=zen" + fi + + if [[ ${SKIP_IAM} == "true" || ${SKIP_ZEN} == "true" ]]; then + info "Using selector: ${selector}" + fi + if [[ ! -z "${CS_NAMESPACE}" ]]; then - oc delete networkpolicies -n ${CS_NAMESPACE} --selector=component=cpfs3 + oc delete networkpolicies -n ${CS_NAMESPACE} --selector="${selector}" fi if [[ ! -z "${OPERATORS_NAMESPACE}" ]]; then - oc delete networkpolicies -n ${OPERATORS_NAMESPACE} --selector=component=cpfs3 + oc delete networkpolicies -n ${OPERATORS_NAMESPACE} --selector="${selector}" fi if [[ ! -z "${CERT_NAMESPACE}" ]]; then - oc delete networkpolicies -n ${CERT_NAMESPACE} --selector=component=cpfs3 + oc delete networkpolicies -n ${CERT_NAMESPACE} --selector="${selector}" fi if [[ ! -z "${LICSVC_NAMESPACE}" ]]; then - oc delete networkpolicies -n ${LICSVC_NAMESPACE} --selector=component=cpfs3 + oc delete networkpolicies -n ${LICSVC_NAMESPACE} --selector="${selector}" fi if [[ ! -z "${LICSVC_REPORTER_NAMESPACE}" ]]; then - oc delete networkpolicies -n ${LICSVC_REPORTER_NAMESPACE} --selector=component=cpfs3 + oc delete networkpolicies -n ${LICSVC_REPORTER_NAMESPACE} --selector="${selector}" fi if [[ ! -z "${FLINK_NAMESPACE}" ]]; then - oc delete networkpolicies -n ${FLINK_NAMESPACE} --selector=component=cpfs3 + oc delete networkpolicies -n ${FLINK_NAMESPACE} --selector="${selector}" fi if [[ ! -z "${OPENSEARCH_NAMESPACE}" ]]; then - oc delete networkpolicies -n ${OPENSEARCH_NAMESPACE} --selector=component=cpfs3 + oc delete networkpolicies -n ${OPENSEARCH_NAMESPACE} --selector="${selector}" fi if [[ ! -z "${ZEN_NAMESPACE}" ]]; then - oc delete networkpolicies -n ${ZEN_NAMESPACE} --selector=component=cpfs3 + oc delete networkpolicies -n ${ZEN_NAMESPACE} --selector="${selector}" fi }