Giters

hashicorp / vault-helm

Helm chart to install Vault and other associated components.

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Adjustments to Network Policies

macmiranda opened this issue · comments

commented

Describe the bug
We're facing 2 issues related to Network Policies when using this Helm chart:

  • Is there a specific reason the Injector Webhook network policy is only enabled for Openshift? I'd like to enable it on Kubernetes
  • When enabling the Network Policy for the server, the namespaceSelector effectively blocks requests coming from outside of the cluster, e.g. an ALB. To solve that issue, these 2 lines should only be added if one wants to enforce namespace selectors. See an example from the Grafana chart.