[Helm] Fix typo in ingress netpol

[C4tWithShell]

No description provided.

[dryrunsecurity]

DryRun Security Summary

The provided patch updates the network policy configuration for the DefectDojo application in a Kubernetes environment, including correcting the ingress condition, enabling the network policy based on the networkPolicy.enabled value, and defining separate network policies for the application and the Django component to enhance application security.

Expand for full summary

Summary:

The code change in the provided patch is related to the network policy configuration for the DefectDojo application in a Kubernetes environment. The key changes include:

1. Correcting the condition for the ingress configuration in the network policy.
2. Enabling the network policy when the networkPolicy.enabled value is set to true.
3. Defining a network policy that matches the pods with the label app.kubernetes.io/instance: {{ .Release.Name }} and configures the ingress and egress traffic based on the networkPolicy.ingress and networkPolicy.egress settings.
4. Defining a separate network policy for the Django component of the DefectDojo application, which allows traffic to the Django component on the appropriate port (8443 if TLS is enabled, 8080 otherwise).

From an application security perspective, the network policy implementation is a good security practice as it helps restrict the network traffic to and from the DefectDojo application, reducing the attack surface. The separate network policy for the Django component allows for more granular control over the traffic to the different components of the application. It is important to ensure that the networkPolicy.ingress and networkPolicy.egress configurations are properly defined to allow the necessary traffic while restricting unnecessary access. The use of Kubernetes network policies is a recommended security practice, as it helps to implement the principle of least privilege and reduce the risk of unauthorized access to the application.

Files Changed:

• helm/defectdojo/templates/network-policy.yaml: This file contains the network policy configuration for the DefectDojo application in a Kubernetes environment. The changes include correcting the condition for the ingress configuration, enabling the network policy based on the networkPolicy.enabled value, and defining the network policy for the application and the Django component.

Code Analysis

We ran 9 analyzers against 1 file and 0 analyzers had findings. 9 analyzers had no findings.

Riskiness

🟢 Risk threshold not exceeded.

View PR in the DryRun Dashboard.

[mtesauro]

Approved

[kiblik]

Hi. Is it possible to merge this into bugfix, please?
I know it will need rebase but it would be nice to have it available.

[C4tWithShell]

Hi. Is it possible to merge this into bugfix, please? I know it will need rebase but it would be nice to have it available.

Sure, but I will create new PR. Will send a link here

[C4tWithShell]

@kiblik @cneill @Maffooch @mtesauro
New PR to bugfix - #10898