diff --git a/charts/opensearch/CHANGELOG.md b/charts/opensearch/CHANGELOG.md index 1ab42a36..5dfe426f 100644 --- a/charts/opensearch/CHANGELOG.md +++ b/charts/opensearch/CHANGELOG.md @@ -12,7 +12,15 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0 ### Removed ### Fixed ### Security - +--- +## [1.5.5] +### Added +- Added `create` flag into the `networkPolicy` resource to enable the creation of a network policy as request, for the cases where an user can't create network policies but want to use this chart. +### Changed +### Deprecated +### Removed +### Fixed +### Security --- ## [1.5.4] ### Added @@ -22,7 +30,6 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0 ### Removed ### Fixed ### Security - --- ## [1.5.3] ### Added @@ -246,7 +253,8 @@ config: ### Fixed ### Security -[Unreleased]: https://github.com/opensearch-project/helm-charts/compare/opensearch-1.5.4...HEAD +[Unreleased]: https://github.com/opensearch-project/helm-charts/compare/opensearch-1.5.5...HEAD +[1.5.5]: https://github.com/opensearch-project/helm-charts/compare/opensearch-1.5.4...opensearch-1.5.5 [1.5.4]: https://github.com/opensearch-project/helm-charts/compare/opensearch-1.5.3...opensearch-1.5.4 [1.5.3]: https://github.com/opensearch-project/helm-charts/compare/opensearch-1.5.2...opensearch-1.5.3 [1.5.2]: https://github.com/opensearch-project/helm-charts/compare/opensearch-1.5.1...opensearch-1.5.2 @@ -270,4 +278,3 @@ config: [1.0.5]: https://github.com/opensearch-project/helm-charts/compare/opensearch-1.0.4...opensearch-1.0.5 [1.0.4]: https://github.com/opensearch-project/helm-charts/compare/opensearch-1.0.2...opensearch-1.0.4 [1.0.2]: https://github.com/opensearch-project/helm-charts/compare/opensearch-1.0.1...opensearch-1.0.2 - diff --git a/charts/opensearch/Chart.yaml b/charts/opensearch/Chart.yaml index 82b77efb..4bdfad9f 100644 --- a/charts/opensearch/Chart.yaml +++ b/charts/opensearch/Chart.yaml @@ -15,7 +15,7 @@ type: application # This is the chart version. This version number should be incremented each time you make changes # to the chart and its templates, including the app version. # Versions are expected to follow Semantic Versioning (https://semver.org/) -version: 1.5.4 +version: 1.5.5 # This is the version number of the application being deployed. This version number should be # incremented each time you make changes to the application. Versions are not expected to diff --git a/charts/opensearch/README.md b/charts/opensearch/README.md index 1dee7d3b..343cf853 100644 --- a/charts/opensearch/README.md +++ b/charts/opensearch/README.md @@ -66,6 +66,7 @@ helm uninstall my-release | `minimumMasterNodes` | The value for `discovery.zen.minimum_master_nodes` | `2` | | `nameOverride` | Overrides the `clusterName` when used in the naming of resources | `""` | | `networkHost` | Value for the `network.host OpenSearch setting` | `0.0.0.0` | +| `networkPolicy.create` | Enable network policy creation for OpenSearch | `false` | `nodeAffinity` | Value for the [node affinity settings][] | `{}` | | `nodeGroup` | This is the name that will be used for each group of nodes in the cluster. The name will be `clusterName-nodeGroup-X` , `nameOverride-nodeGroup-X` if a `nameOverride` is specified, and `fullnameOverride-X` if a `fullnameOverride` is specified | `master` | | `nodeSelector` | Configurable [nodeSelector][] so that you can target specific nodes for your OpenSearch cluster | `{}` | diff --git a/charts/opensearch/templates/networkpolicy.yaml b/charts/opensearch/templates/networkpolicy.yaml index aca4aab1..51cd2635 100644 --- a/charts/opensearch/templates/networkpolicy.yaml +++ b/charts/opensearch/templates/networkpolicy.yaml @@ -1,3 +1,4 @@ +{{- if .Values.networkPolicy.create -}} apiVersion: networking.k8s.io/v1 kind: NetworkPolicy metadata: @@ -13,3 +14,4 @@ spec: podSelector: matchLabels: {{ template "opensearch.uname" . }}-transport-client: "true" +{{- end }} diff --git a/charts/opensearch/values.yaml b/charts/opensearch/values.yaml index 25557a51..91fc1a66 100644 --- a/charts/opensearch/values.yaml +++ b/charts/opensearch/values.yaml @@ -383,6 +383,7 @@ lifecycle: {} keystore: [] networkPolicy: + create: false ## Enable creation of NetworkPolicy resources. Only Ingress traffic is filtered for now. ## In order for a Pod to access OpenSearch, it needs to have the following label: ## {{ template "uname" . }}-client: "true"