Fix up ports and add default-allow-all to operators namespace

Signed-off-by: Per G. da Silva <[email protected]>

Author: Per G. da Silva

deploy/chart/templates/0000_50_olm_01-networkpolicies.yaml

@@ -9,14 +9,15 @@ spec:
  - Ingress
  - Egress
 ---
-apiVersion: networking.k8s.io/v1	
+---
+apiVersion: networking.k8s.io/v1
 kind: NetworkPolicy
 metadata:
  name: olm-operator
  namespace: {{ .Values.namespace }}
 spec:
  podSelector:
-   matchLabels: 
+   matchLabels:
      app: olm-operator
  ingress:
  - ports:
@@ -25,19 +26,25 @@ spec:
  egress:
  - ports:
    - protocol: TCP
-     port: 6443                                    
+     port: 6443  # kube-api service
+   - protocol: TCP
+     port: 50051  # catalog service
+   - protocol: TCP
+     port: 53  # DNS
+   - protocol: UDP
+     port: 53  # DNS
  policyTypes:
- - Ingress            
+ - Ingress
  - Egress
 ---
-apiVersion: networking.k8s.io/v1	
+apiVersion: networking.k8s.io/v1
 kind: NetworkPolicy
 metadata:
  name: catalog-operator
  namespace: {{ .Values.namespace }}
 spec:
  podSelector:
-   matchLabels: 
+   matchLabels:
      app: catalog-operator
  ingress:
  - ports:
@@ -46,23 +53,46 @@ spec:
  egress:
  - ports:
    - protocol: TCP
-     port: 6443                                    
+     port: 6443  # kube-api server
+   - protocol: TCP
+     port: 50051  # catalog service
+   - protocol: TCP
+     port: 53  # DNS
+   - protocol: UDP
+     port: 53  # DNS
+   - protocol: TCP
+     port: {{ .Values.package.service.internalPort }}  # package service
  policyTypes:
- - Ingress            
+ - Ingress
  - Egress
 ---
-apiVersion: networking.k8s.io/v1	
+apiVersion: networking.k8s.io/v1
 kind: NetworkPolicy
 metadata:
  name: packageserver
  namespace: {{ .Values.namespace }}
 spec:
  podSelector:
-   matchLabels: 
+   matchLabels:
      app: packageserver
  ingress:
  - ports:
    - protocol: TCP
-     port: {{ .Values.package.service.internalPort }}                                  
+     port: {{ .Values.package.service.internalPort }}
  policyTypes:
- - Ingress    
+ - Ingress
+---
+apiVersion: networking.k8s.io/v1
+kind: NetworkPolicy
+metadata:
+  name: default-allow-all
+  namespace: {{ .Values.operator_namespace }}
+spec:
+  podSelector: {}
+  policyTypes:
+    - Ingress
+    - Egress
+  ingress:
+    - {}
+  egress:
+    - {}