Merge pull request opendatahub-io#190 from DharmitD/mlmd-nw-policy

openshift-merge-robot · web-flow · commit 7f5f983f765a · 2023-07-12T16:34:02.000-04:00
Add MLMD components to Network Policy
diff --git a/config/internal/common/mlmd-envoy-dashboard-access-policy.yaml.tmpl b/config/internal/common/mlmd-envoy-dashboard-access-policy.yaml.tmpl
@@ -0,0 +1,24 @@
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+  name: ds-pipelines-envoy-{{ .Name }}
+  namespace: {{ .Namespace }}
+spec:
+  podSelector:
+    matchLabels:
+      app: ds-pipeline-metadata-envoy-{{ .Name }}
+      component: data-science-pipelines
+  ingress:
+    - ports:
+        - protocol: TCP
+          port: 9090
+      from:
+        - podSelector:
+            matchLabels:
+              app: odh-dashboard
+          namespaceSelector: {}
+        - podSelector:
+            matchLabels:
+              component: data-science-pipelines
+  policyTypes:
+    - Ingress
diff --git a/config/internal/common/policy.yaml.tmpl b/config/internal/common/policy.yaml.tmpl
@@ -45,6 +45,18 @@ spec:
             matchLabels:
               app: ds-pipeline-scheduledworkflow-{{.Name}}
               component: data-science-pipelines
+        - podSelector:
+            matchLabels:
+              app: ds-pipeline-metadata-envoy-{{.Name}}
+              component: data-science-pipelines
+        - podSelector:
+            matchLabels:
+              app: ds-pipeline-metadata-grpc-{{.Name}}
+              component: data-science-pipelines
+        - podSelector:
+            matchLabels:
+              app: ds-pipeline-metadata-writer-{{.Name}}
+              component: data-science-pipelines
       ports:
         - protocol: TCP
           port: 8888
diff --git a/controllers/common.go b/controllers/common.go
@@ -21,6 +21,7 @@ import (
 
 var commonTemplates = []string{
 	"common/policy.yaml.tmpl",
+	"common/mlmd-envoy-dashboard-access-policy.yaml.tmpl",
 }
 
 const commonCusterRolebindingTemplate = "common/clusterrolebinding.yaml.tmpl"

Original file line number	Diff line number	Diff line change
`@@ -21,6 +21,7 @@ import (`
`21`	`21`
`22`	`22`	`var commonTemplates = []string{`
`23`	`23`	`"common/policy.yaml.tmpl",`
	`24`	`+ "common/mlmd-envoy-dashboard-access-policy.yaml.tmpl",`
`24`	`25`	`}`
`25`	`26`
`26`	`27`	`const commonCusterRolebindingTemplate = "common/clusterrolebinding.yaml.tmpl"`