diff --git a/chart/templates/uds-package.yaml b/chart/templates/uds-package.yaml index 16e935d..70d1840 100644 --- a/chart/templates/uds-package.yaml +++ b/chart/templates/uds-package.yaml @@ -38,3 +38,18 @@ spec: podLabels: app.kubernetes.io/name: confluence remoteGenerated: Anywhere +# Custom rules for unanticipated scenarios + {{- range .Values.custom }} + - direction: {{ .direction }} + selector: + {{ .selector | toYaml | nindent 10 }} + {{- if not .remoteGenerated }} + remoteNamespace: {{ .remoteNamespace }} + remoteSelector: + {{ .remoteSelector | toYaml | nindent 10 }} + port: {{ .port }} + {{- else }} + remoteGenerated: {{ .remoteGenerated }} + {{- end }} + description: {{ .description }} + {{- end }} \ No newline at end of file diff --git a/chart/values.yaml b/chart/values.yaml index 9c2f3c1..f1b79d7 100644 --- a/chart/values.yaml +++ b/chart/values.yaml @@ -1,2 +1,18 @@ domain: "###ZARF_VAR_DOMAIN###" sso: true +# custom: +# # Notice no `remoteGenerated` field here on custom internal rule +# - direction: Ingress +# selector: +# app: jenkins +# remoteNamespace: jenkins +# remoteSelector: +# app: jenkins +# port: 8180 +# description: "Ingress from Jenkins" +# # No `remoteNamespace`, `remoteSelector`, or `port` fields on rule to `remoteGenerated` +# - direction: Egress +# selector: +# app: webservice +# remoteGenerated: Anywhere +# description: "Egress from Mattermost"