Infrastructure/ansible
3
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

openshift/project: simplify egresspolicy - different env db won't allow access anyway

Browse source 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
This commit is contained in:
Patrick Uiterwijk 2019-05-09 13:41:55 +02:00
parent 63451e80a1
commit 72ac044a5e
1 changed files with 5 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

9
roles/openshift/project/templates/egresspolicy.yml
View file

@ -6,14 +6,15 @@ metadata:
spec: spec:
egress: egress:
{% if not allow_fas_db or env != "production" %} {% if not allow_fas_db or env != "production" %}
{% if env == "staging" %}
- type: Deny
to:
cidrSelector: "10.5.128.96/32"
{% else %}
- type: Deny - type: Deny
to: to:
cidrSelector: "10.5.126.99/32" cidrSelector: "10.5.126.99/32"
{% endif %} {% endif %}
{% if not allow_fas_db or env != "staging" %}
- type: Deny
to:
cidrSelector: "10.5.128.96/32"
{% endif %} {% endif %}
- type: Allow - type: Allow
to: to: