test: lock down database pod

SwanseaUniversityMedical · Apr 4, 2024 · 320a099 · 320a099
1 parent 8723cb3
commit 320a099
Showing 1 changed file with 14 additions and 17 deletions.
diff --git a/charts/guacamole/templates/database/database-network.yaml b/charts/guacamole/templates/database/database-network.yaml
@@ -18,20 +18,17 @@ spec:
   - Egress
 
   ingress:
-    - {}
-{{/*    - from:*/}}
-{{/*      - podSelector:*/}}
-{{/*          matchLabels:*/}}
-{{/*            app: {{ include "guacamole.labels.app" . }}*/}}
-{{/*            component: web*/}}
-{{/*            release: {{ .Release.Name }}*/}}
-{{/*        - podSelector:*/}}
-{{/*            matchLabels:*/}}
-{{/*              cnpg.io/cluster: {{ include "guacamole.fullname" . }}-database*/}}
-{{/*      - podSelector:*/}}
-{{/*          matchLabels:*/}}
-{{/*            app: {{ include "guacamole.labels.app" . }}*/}}
-{{/*            component: controller*/}}
-{{/*            release: {{ .Release.Name }}*/}}
-  egress:
-    - {}
+    - from:
+      - podSelector:
+          matchLabels:
+            app: {{ include "guacamole.labels.app" . }}
+            component: web
+            release: {{ .Release.Name }}
+        - podSelector:
+            matchLabels:
+              cnpg.io/cluster: {{ include "guacamole.fullname" . }}-database
+      - podSelector:
+          matchLabels:
+            app: {{ include "guacamole.labels.app" . }}
+            component: controller
+            release: {{ .Release.Name }}