K8s: Add option to inject network policies into chart (#3033)

Author: visit1985

charts/selenium-grid/README.md

@@ -409,6 +409,14 @@ helm upgrade selenium-grid docker-selenium/selenium-grid --set 'firefoxNode.enab
 
 Note: the parameter used for --set-json is just an example, please refer to [Container Spec](https://www.devspace.sh/component-chart/docs/configuration/containers) for an overview of usable parameters.
 
+If needed, you can add network policies for your selenium-grid by running:
+
+```bash
+helm upgrade selenium-grid docker-selenium/selenium-grid --set 'firefoxNode.enabled=true' --set-json 'networkPolicies={"allow-selenium":{"podSelector":{"matchLabels":{"app.kubernetes.io/name":"selenium-node-firefox"}},"policyTypes":["Egress"],"egress":[{}]}}'
+```
+
+Note: the parameter used for --set-json is just an example, please refer to [Network Policy Spec](https://kubernetes.io/docs/concepts/services-networking/network-policies/) for an overview of usable parameters.
+
 ## Uninstalling Selenium Grid release
 
 To uninstall:

charts/selenium-grid/templates/networkpolicy.yaml

@@ -0,0 +1,10 @@
+{{- range $name, $spec := .Values.networkPolicies }}
+apiVersion: networking.k8s.io/v1
+kind: NetworkPolicy
+metadata:
+  name: {{ $name }}
+  namespace: {{ $.Release.Namespace }}
+spec:
+{{ toYaml $spec | indent 2 }}
+---
+{{- end }}

charts/selenium-grid/values.yaml

@@ -2185,6 +2185,18 @@ videoManager:
   #   persistentVolumeClaim:
   #     claimName: video-pv-claim
 
+# -- Add network policies to this chart
+# It can be set using the --set-json option
+networkPolicies: {}
+# allow-selenium:
+#   podSelector:
+#     matchLabels:
+#       app.kubernetes.io/name: selenium-node-firefox
+#   policyTypes:
+#     - Egress
+#   egress:
+#     - {}
+
 # Configuration for dependency chart keda
 keda:
   # enabled: false