add helm template and test

Signed-off-by: Haywood Shannon <[email protected]>

Signed-off-by: Haywood Shannon <[email protected]>

Author: haywoodsh

charts/nginx-ingress/values.schema.json

@@ -2681,6 +2681,78 @@
           ]
         }
       }
+    },
+    "networkPolicy": {
+      "type": "object",
+      "default": {
+        "enabled": false
+      },
+      "title": "Configuration for NetworkPolicy",
+      "required": [
+        "enabled"
+      ],
+      "properties": {
+        "enabled": {
+          "type": "boolean",
+          "default": false,
+          "title": "Enable NetworkPolicy",
+          "examples": [
+            false,
+            true
+          ]
+        },
+        "policyTypes": {
+          "type": "array",
+          "default": [
+            "Ingress",
+            "Egress"
+          ],
+          "title": "Types of policy to create",
+          "$ref": "https://raw.githubusercontent.com/nginxinc/kubernetes-json-schema/master/v1.33.1/_definitions.json#/definitions/io.k8s.api.networking.v1.NetworkPolicySpec/properties/policyTypes"
+        },
+        "podSelector": {
+          "type": "object",
+          "default": {},
+          "title": "Label selector for pods (defaults to ingress controller pods)",
+          "$ref": "https://raw.githubusercontent.com/nginxinc/kubernetes-json-schema/master/v1.33.1/_definitions.json#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector"
+        },
+        "ingress": {
+          "type": "array",
+          "default": [
+            {
+              "from": [],
+              "ports": [
+                {
+                  "protocol": "TCP",
+                  "port": 80
+                },
+                {
+                  "protocol": "TCP",
+                  "port": 443
+                }
+              ]
+            }
+          ],
+          "title": "Ingress rules",
+          "$ref": "https://raw.githubusercontent.com/nginxinc/kubernetes-json-schema/master/v1.33.1/_definitions.json#/definitions/io.k8s.api.networking.v1.NetworkPolicySpec/properties/ingress"
+        },
+        "egress": {
+          "type": "array",
+          "default": [
+            {
+              "to": [],
+              "ports": [
+                {
+                  "protocol": "UDP",
+                  "port": 53
+                }
+              ]
+            }
+          ],
+          "title": "Egress rules",
+          "$ref": "https://raw.githubusercontent.com/nginxinc/kubernetes-json-schema/master/v1.33.1/_definitions.json#/definitions/io.k8s.api.networking.v1.NetworkPolicySpec/properties/egress"
+        }
+      }
     }
   },
   "examples": [

charts/nginx-ingress/values.yaml

@@ -767,22 +767,33 @@ nginxAgent:
   ## The name of a custom ConfigMap to use instead of the one provided by default
   customConfigMap: ""
 
-# Default values for nginx-ingress with optional NetworkPolicy
+## Configure Kubernetes NetworkPolicy for the ingress controller pods
 networkPolicy:
-  enabled: false            # Set to true to enable the NetworkPolicy
-  policyTypes:             # Types of policy to create
+  ## Enable creation of a NetworkPolicy resource for the ingress controller pods
+  enabled: false
+
+  ## List of NetworkPolicy types to apply (Ingress, Egress, or both)
+  policyTypes:
     - Ingress
     - Egress
-  podSelector: {}           # Label selector for pods (defaults to ingress controller pods)
-  ingress:                  # Ingress rules
-    - from: []              # List of peer selectors (e.g. namespaces, pods)
+
+  ## Label selector for pods the NetworkPolicy applies to (defaults to ingress controller pods)
+  podSelector:
+    matchLabels:
+      app.kubernetes.io/name: nginx-ingress
+
+  ## List of ingress rules for allowed sources and ports
+  ingress:
+    - from: []
       ports:
         - protocol: TCP
           port: 80
         - protocol: TCP
           port: 443
-  egress:                   # Egress rules
-    - to: []                # List of peer selectors
+
+  ## List of egress rules for allowed destinations and ports
+  egress:
+    - to: []
       ports:
         - protocol: UDP
           port: 53