add new var

Author: trevorbox

charts/istio-member-namespaces/Chart.yaml

@@ -15,7 +15,7 @@ type: application
 # This is the chart version. This version number should be incremented each time you make changes
 # to the chart and its templates, including the app version.
 # Versions are expected to follow Semantic Versioning (https://semver.org/)
-version: 1.2.9
+version: 1.3.0
 
 # This is the version number of the application being deployed. This version number should be
 # incremented each time you make changes to the application. Versions are not expected to

charts/istio-member-namespaces/templates/networkpolicy-allow-egress-clusternetwork-cidr.yaml

@@ -0,0 +1,14 @@
+{{- if .Values.egressControl.enabled }}
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+  name: allow-egress-clusternetwork-cidr
+spec:
+  podSelector: {}
+  egress:
+    - to:
+        - ipBlock:
+            cidr: {{ .Values.egressControl.cidr }} # oc get network cluster -o=jsonpath='{.spec.clusterNetwork[0].cidr}'
+  policyTypes:
+    - Egress
+{{- end }}

charts/istio-member-namespaces/values.yaml

@@ -18,3 +18,6 @@ networkpolicies:
     istioSystemNamespace: istio-system
 ambient:
   enabled: false
+egressControl:
+  enabled: false
+  cidr: 10.217.0.0/22 # oc get network cluster -o=jsonpath='{.spec.clusterNetwork[0].cidr}'

charts/ossm3/values.yaml

@@ -3,6 +3,10 @@ istioCNI:
     version: v1.26.2
     namespace: istio-cni
     # profile: ambient
+    # values:
+    #   cni:
+    #     ambient:
+    #       reconcileIptablesOnStartup: true
 # https://istio.io/latest/docs/setup/upgrade/canary/
 istioRevisionTags: 
   # https://istio.io/latest/docs/setup/upgrade/canary/#default-tag