Merge pull request #167 from projectsyn/feat/enable-netpol-by-default

Enable NetworkPolicy by default

class/defaults.yml

@@ -4,7 +4,7 @@ parameters:
     namespace: syn
     distribution: ${facts:distribution}
     network_policies:
-      enabled: false
+      enabled: true
       allow_from_namespaces: []
     monitoring:
       enabled: true

docs/modules/ROOT/pages/references/parameters.adoc

@@ -38,7 +38,7 @@ SSH known hosts for Git servers.
 == `network_policies.enabled`
 [horizontal]
 type:: boolean
-default:: false
+default:: true
 
 Whether to enable NetworkPolicies that isolate ArgoCD from the rest of the cluster.
 

tests/defaults.yml

@@ -1,12 +1,6 @@
-applications:
-  - prometheus
-
 parameters:
   kapitan:
     dependencies:
-      - type: https
-        source: https://raw.githubusercontent.com/projectsyn/component-prometheus/master/lib/prometheus.libsonnet
-        output_path: vendor/lib/prometheus.libsonnet
       - type: https
         source: https://raw.githubusercontent.com/projectsyn/component-cert-manager/master/lib/cert-manager.libsonnet
         output_path: vendor/lib/cert-manager.libsonnet
@@ -15,6 +9,3 @@ parameters:
     vault_role: test
     vault_auth_mount_path: auth/lieutenant
     vault_addr: test.syn.tools
-
-  prometheus:
-    defaultInstance: infra

tests/golden/defaults/argocd/argocd/01_namespace/00_namespace.yaml

@@ -4,7 +4,6 @@ metadata:
   annotations: {}
   labels:
     app.kubernetes.io/part-of: argocd
-    monitoring.syn.tools/infra: 'true'
     name: syn
     openshift.io/cluster-monitoring: 'true'
   name: syn

tests/golden/defaults/argocd/argocd/01_namespace/20_monitoring.yaml

@@ -4,7 +4,6 @@ metadata:
   labels:
     app.kubernetes.io/name: syn-argocd-metrics
     app.kubernetes.io/part-of: argocd
-    monitoring.syn.tools/enabled: 'true'
     name: syn-component-argocd-metrics
   name: syn-component-argocd-metrics
   namespace: syn
@@ -22,7 +21,6 @@ metadata:
   labels:
     app.kubernetes.io/name: syn-argocd-server-metrics
     app.kubernetes.io/part-of: argocd
-    monitoring.syn.tools/enabled: 'true'
     name: syn-component-argocd-server-metrics
   name: syn-component-argocd-server-metrics
   namespace: syn
@@ -40,7 +38,6 @@ metadata:
   labels:
     app.kubernetes.io/name: syn-argocd-repo-server
     app.kubernetes.io/part-of: argocd
-    monitoring.syn.tools/enabled: 'true'
     name: syn-component-argocd-repo-server
   name: syn-component-argocd-repo-server
   namespace: syn
@@ -57,7 +54,6 @@ kind: PrometheusRule
 metadata:
   labels:
     cluster_id: c-green-test-1234
-    monitoring.syn.tools/enabled: 'true'
     name: argocd
     prometheus: platform
     role: alert-rules

tests/golden/defaults/argocd/argocd/30_argocd/20_networkpolicy.yaml

@@ -0,0 +1,15 @@
+apiVersion: networking.k8s.io/v1
+kind: NetworkPolicy
+metadata:
+  annotations: {}
+  labels:
+    name: argocd-allow-same-namespace
+  name: argocd-allow-same-namespace
+  namespace: syn
+spec:
+  ingress:
+    - from:
+        - podSelector: {}
+  podSelector: {}
+  policyTypes:
+    - Ingress