Skip to content

Np for operator manager#2147

Draft
anandrkskd wants to merge 4 commits intoargoproj-labs:masterfrom
anandrkskd:NP-for-operator-manager
Draft

Np for operator manager#2147
anandrkskd wants to merge 4 commits intoargoproj-labs:masterfrom
anandrkskd:NP-for-operator-manager

Conversation

@anandrkskd
Copy link
Copy Markdown
Collaborator

What type of PR is this?

/kind enhancement

What does this PR do / why we need it:
This PR adds network policy for operator controller manager pod. To add this NP we will need to update the operator sdk to version 1.40.0 or higher to be able to include network-policy when creating bundle, Or else the bundle creation fails.
NP rules added are

  ingress:
    - ports:
        # health probes (kubelet)
        - protocol: TCP
          port: 8081
        # CRD conversion webhook (API server, handler registered when ENABLE_CONVERSION_WEBHOOK=true)
        - protocol: TCP
          port: 9443
        # metrics (Prometheus)
        - protocol: TCP
          port: 8080
        # metrics via kube-rbac-proxy (when manager_auth_proxy_patch is enabled)
        - protocol: TCP
          port: 8443
  egress:
    # Kubernetes API server
    - ports:
        - protocol: TCP
          port: 443
        - protocol: TCP
          port: 6443
    # DNS resolution
    - ports:
        - protocol: UDP
          port: 53
        - protocol: TCP
          port: 53

Have you updated the necessary documentation?

  • Documentation update is required by this PR.
  • Documentation has been updated.

Which issue(s) this PR fixes:

Fixes #?

How to test changes / Special notes to the reviewer:

Signed-off-by: Anand Kumar Singh <anandrkskd@gmail.com>
Signed-off-by: Anand Kumar Singh <anandrkskd@gmail.com>
Signed-off-by: Anand Kumar Singh <anandrkskd@gmail.com>
Signed-off-by: Anand Kumar Singh <anandrkskd@gmail.com>
@coderabbitai
Copy link
Copy Markdown

coderabbitai bot commented Apr 7, 2026

Important

Review skipped

Draft detected.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro

Run ID: ae6e853a-4ad5-4996-a3f0-76e8ba4c16de

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands and usage tips.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants