Merge pull request #865 from bcgov/yj

chore: backup container netpol
bcgov · Dec 11, 2024 · f59aeff · f59aeff
2 parents 7f5a506 + fbae723
commit f59aeff
Show file tree

Hide file tree

Showing 2 changed files with 26 additions and 2 deletions.
diff --git a/backup-container/helm/backup-storage/templates/networkpolicy.yaml b/backup-container/helm/backup-storage/templates/networkpolicy.yaml
@@ -20,4 +20,28 @@ spec:
         - ipBlock:
             cidr: 142.34.229.4/32
   policyTypes:
-    - Egress
+    - Egress
+---
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+  name: enable-ingress-to-db-from-{{ include "backup-storage.fullname" . }}
+  labels:
+    {{- include "backup-storage.labels" . | nindent 4 }}
+    {{- with .Values.global.labels }}
+    {{- toYaml . | nindent 4 }}
+    {{- end }}
+spec:
+  podSelector:
+    matchLabels:
+      app.kubernetes.io/name: {{ .Values.dbService }}
+  ingress:
+    - from:
+        - podSelector:
+            matchLabels:
+              app.kubernetes.io/name: {{ include "backup-storage.fullname" . }}
+      ports:
+        - protocol: TCP
+          port: 5432
+  policyTypes:
+    - Ingress
diff --git a/backup-container/helm/prod-values.yaml b/backup-container/helm/prod-values.yaml
@@ -22,7 +22,7 @@ db:
 
 persistence:
   backup:
-    size: 1Gi
+    size: 10Gi
     mountPath: /backups/
     storageClassName: netapp-file-backup
     storageAccessMode: ReadWriteOnce