improve

Author: labuladong

charts/sn-platform-slim/templates/bookkeeper/bookkeeper-authorizationpolicy.yaml

@@ -10,11 +10,20 @@ metadata:
   namespace: {{ template "pulsar.namespace" . }}
 spec:
   rules:
-  - to:
+  - {{- if .Values.bookkeeper.authorizationPolicy.from }}
+    from:
+{{ toYaml .Values.bookkeeper.authorizationPolicy.from | indent 4 }}
+    {{- end }}
+    {{- if .Values.bookkeeper.authorizationPolicy.to }}
+    to:
+{{ toYaml .Values.bookkeeper.authorizationPolicy.to | indent 4 }}
+    {{- else }}
+    to:
     - operation:
         ports:
         - "3181"
         - "8000"
+    {{- end }}
   action: ALLOW
   selector:
     matchLabels:
@@ -30,10 +39,19 @@ metadata:
   namespace: {{ template "pulsar.namespace" . }}
 spec:
   rules:
-  - to:
+  - {{- if .Values.autorecovery.authorizationPolicy.from }}
+    from:
+{{ toYaml .Values.autorecovery.authorizationPolicy.from | indent 4 }}
+    {{- end }}
+    {{- if .Values.autorecovery.authorizationPolicy.to }}
+    to:
+{{ toYaml .Values.autorecovery.authorizationPolicy.to | indent 4 }}
+    {{- else }}
+    to:
     - operation:
         ports:
         - "{{ .Values.autorecovery.ports.http }}"
+    {{- end }}
   action: ALLOW
   selector:
     matchLabels:

charts/sn-platform-slim/templates/broker/broker-authorizationpolicy.yaml

@@ -10,7 +10,15 @@ metadata:
   namespace: {{ template "pulsar.namespace" . }}
 spec:
   rules:
-  - to:
+  - {{- if .Values.broker.authorizationPolicy.from }}
+    from:
+{{ toYaml .Values.broker.authorizationPolicy.from | indent 4 }}
+    {{- end }}
+    {{- if .Values.broker.authorizationPolicy.to }}
+    to:
+{{ toYaml .Values.broker.authorizationPolicy.to | indent 4 }}
+    {{- else }}
+    to:
     - operation:
         ports:
         - "6650"
@@ -41,6 +49,7 @@ spec:
         - "9095"
         {{- end }}
         {{- end }}
+    {{- end }}
   action: ALLOW
   selector:
     matchLabels:

charts/sn-platform-slim/templates/zookeeper/zookeeper-authorizationpolicy.yaml

@@ -10,14 +10,23 @@ metadata:
   namespace: {{ template "pulsar.namespace" . }}
 spec:
   rules:
-  - to:
+  - {{- if .Values.zookeeper.authorizationPolicy.from }}
+    from:
+{{ toYaml .Values.zookeeper.authorizationPolicy.from | indent 4 }}
+    {{- end }}
+    {{- if .Values.zookeeper.authorizationPolicy.to }}
+    to:
+{{ toYaml .Values.zookeeper.authorizationPolicy.to | indent 4 }}
+    {{- else }}
+    to:
     - operation:
         ports:
         - "2181"
         - "9990"
         - "2888"
         - "3888"
         - "{{ .Values.zookeeper.ports.metrics  }}"
+    {{- end }}
   action: ALLOW
   selector:
     matchLabels: