search

airshipit / treasuremap

Reference Airship manifests, CICD, and reference architecture.
http://openstack.org
Apache License 2.0
52 stars 39 forks source link

Create network policies (N/S and E/W) for infrastructure and sub-clusters #131

Closed onlysource closed 3 years ago

onlysource commented 3 years ago

Problem description (if applicable) The deployment phase will need to implement specific N/S and E/W policies to allow all intended traffic flow between Infrastructure and Sub-clusters

Proposed change Create necessary network policies to support desired traffic flow within the site. These policies will be implemented via 'airshipctl' phase.

Potential impacts Not having any network policies could potentially overwhelm the infrastructure network from undesired traffic (N/S or E/W), leading to service-denial.

ratnopamc commented 3 years ago

We are defining these E-W, N-S specific network policies downstream. Do we want to expose those network policies in upstream repo too? Or are these for different set of policies?

ratnopamc commented 3 years ago

Please assign to me, size m.

ratnopamc commented 3 years ago

Updated PS at https://review.opendev.org/c/airship/treasuremap/+/789942. Thanks.