Skip to content

Network Policies📜

Renovate (like many other BigBang components) allows you to specify additional network controls through values provided to the chart. Please consult the Big Bang User Guide for information and instruction in this regard.

In order to deliver additional NetworkPolicy controls with your BigBang Renovate deployment, first enable networkPolicies for BigBang generally:

networkPolicies:
  enabled: true

Now you can add additional NetworkPolicies to your Renovate addon configuration through the addons.renovate.values.networkPolicies.additionalPolicies key:

addons:
  renovate:
    values:
      networkPolicies:
        additionalPolicies:
        - name: this-is-an-egress-control
          spec:
            podSelector: {}
            policyTypes:
            - Egress
            egress:
            - to:
              - ipBlock:
                  cidr: 172.20.0.0/12
        - name: this-is-an-ingress-control
          spec:
            podSelector: {}
            policyTypes:
            - Ingress
            ingress:
            - from:
              - ipBlock:
                  cidr: 172.20.0.0/12

For more information on Kubernetes NetworkPolicy objects, see the upstream docs. For more information on BigBang Network controls generally, see the bb-common network policies documentation.