Merge pull request #27 from RasaHQ/add_extra_network_policies

Add network policy for the rabbitmq_peer_discovery_k8s plugin

charts/rasa/Chart.yaml

@@ -15,7 +15,7 @@ type: application
 # This is the chart version. This version number should be incremented each time you make changes
 # to the chart and its templates, including the app version.
 # Versions are expected to follow Semantic Versioning (https://semver.org/)
-version: 1.2.4
+version: 1.2.5
 
 # This is the version number of the application being deployed. This version number should be
 # incremented each time you make changes to the application. Versions are not expected to
@@ -72,6 +72,5 @@ dependencies:
 annotations:
   # See: https://artifacthub.io/docs/topics/annotations/helm/#supported-annotations
   artifacthub.io/changes: |
-    - kind: security
-      description: Bump NGINX image to 1.20
-  artifacthub.io/containsSecurityUpdates: "true"
+    - kind: added
+      description: Add network policy for the rabbitmq_peer_discovery_k8s plugin

charts/rasa/templates/network-policy/rabbitmq-https-kubernetes-api.yaml

@@ -0,0 +1,19 @@
+{{- if and .Values.networkPolicy.enabled .Values.rabbitmq.install }}
+apiVersion: networking.k8s.io/v1
+kind: NetworkPolicy
+metadata:
+  name: {{ include "rasa-common.names.fullname" . }}-rabbitmq-https-kubernetes-api
+spec:
+  podSelector:
+    matchLabels:
+      app.kubernetes.io/name: rabbitmq
+  policyTypes:
+  - Egress
+  egress:
+  - ports:
+      - protocol: TCP
+        port: 8443
+      - protocol: TCP
+        port: 443
+---
+{{- end }}