squashme: fix postgres network policy

SwissDataScienceCenter · May 11, 2023 · 66dd4e7 · 66dd4e7
1 parent 2c21c71
commit 66dd4e7
Show file tree

Hide file tree

Showing 6 changed files with 14 additions and 8 deletions.
diff --git a/helm-chart/renku/templates/crac/deployment.yaml b/helm-chart/renku/templates/crac/deployment.yaml
@@ -3,7 +3,7 @@ kind: Deployment
 metadata:
   name: {{ template "renku.fullname" . }}-crac
   labels:
-    app: {{ template "renku.fullname" . }}-crac
+    app: renku-crac
     chart: {{ template "renku.chart" . }}
     release: {{ .Release.Name }}
     heritage: {{ .Release.Service }}
@@ -15,12 +15,12 @@ spec:
     {{- toYaml .Values.crac.updateStrategy | nindent 4 }}
   selector:
     matchLabels:
-      app: {{ template "renku.name" . }}-crac
+      app: renku-crac
       release: {{ .Release.Name }}
   template:
     metadata:
       labels:
-        app: {{ template "renku.name" . }}-crac
+        app: renku-crac
         release: {{ .Release.Name }}
       {{- with .Values.crac.podAnnotations }}
       annotations:

diff --git a/helm-chart/renku/templates/crac/hpa.yaml b/helm-chart/renku/templates/crac/hpa.yaml
@@ -8,7 +8,7 @@ kind: HorizontalPodAutoscaler
 metadata:
   name: {{ template "renku.fullname" . }}-crac
   labels:
-    app: {{ template "renku.name" . }}-crac
+    app: renku-crac
     chart: {{ template "renku.chart" . }}
     release: {{ .Release.Name }}
     heritage: {{ .Release.Service }}

diff --git a/helm-chart/renku/templates/crac/pdb.yaml b/helm-chart/renku/templates/crac/pdb.yaml
@@ -4,14 +4,14 @@ kind: PodDisruptionBudget
 metadata:
   name: {{ template "renku.fullname" . }}-crac
   labels:
-    app: {{ template "renku.name" . }}-crac
+    app: renku-crac
     chart: {{ template "renku.chart" . }}
     release: {{ .Release.Name }}
     heritage: {{ .Release.Service }}
 spec:
   maxUnavailable: 50%
   selector:
     matchLabels:
-      app: {{ template "renku.name" . }}-crac
+      app: renku-crac
       release: {{ .Release.Name }}
 {{- end }}
diff --git a/helm-chart/renku/templates/crac/service.yaml b/helm-chart/renku/templates/crac/service.yaml
@@ -3,7 +3,7 @@ kind: Service
 metadata:
   name: {{ template "renku.name" . }}-crac
   labels:
-    app: {{ template "renku.name" . }}-crac
+    app: renku-crac
     chart: {{ template "renku.chart" . }}
     release: {{ .Release.Name }}
     heritage: {{ .Release.Service }}

diff --git a/helm-chart/renku/templates/network-policies.yaml b/helm-chart/renku/templates/network-policies.yaml
@@ -57,6 +57,12 @@ spec:
           namespaceSelector:
             matchLabels:
               kubernetes.io/metadata.name: {{ .Release.Namespace }}
+        - podSelector:
+            matchLabels:
+              app: renku-crac
+          namespaceSelector:
+            matchLabels:
+              kubernetes.io/metadata.name: {{ .Release.Namespace }}
       ports:
         - protocol: TCP
           port: 5432

diff --git a/helm-chart/renku/templates/secrets.yaml b/helm-chart/renku/templates/secrets.yaml
@@ -37,7 +37,7 @@ type: Opaque
 data:
   {{ .Values.redis.auth.existingSecretPasswordKey }}: {{ .Values.redis.password | b64enc | quote }}
 {{- end }}
-
+---
 apiVersion: v1
 kind: Secret
 metadata: