DNM OADP-6074: add network policies for OADP #1906
Conversation
Signed-off-by: Wesley Hayutin <[email protected]>
openshift-ci-robot
added
the
jira/valid-reference
|
@weshayutin: This pull request references OADP-6074 which is a valid jira issue. In response to this:
Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository. |
|
[APPROVALNOTIFIER] This PR is NOT APPROVED This pull-request has been approved by: weshayutin The full list of commands accepted by this bot can be found here.
Needs approval from an approver in each of these files:
Approvers can indicate their approval by writing |
| name: default-deny-labelled | ||
| ``` | ||
|
|
||
| This policy implements a **default-deny approach** for pods managed by the OADP operator, meaning that by default, all network traffic is blocked except for explicitly allowed connections. |
There was a problem hiding this comment.
Will this block the OADP CLI from functioning? Did we ever enable the pull-through logs download that @kaovilai had started? Do we need to allow this in some way?
There was a problem hiding this comment.
I think we can revise the default policy later if needed. The download server has not yet been implemented.
|
/retest |
|
@weshayutin: all tests passed! Full PR test history. Your PR dashboard. Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here. |
4 participants
Why the changes were made
https://issues.redhat.com/browse/OADP-6074
How to test the changes made
For now the only way to test is to use the networkpolicy yaml in the docs directory and attempt backup and restore operations.