From cb1feb46e2e83f5e76a2e16af4498b23fb41999a Mon Sep 17 00:00:00 2001
From: Evgeny L <eli@mirantis.com>
Date: Tue, 22 Oct 2019 19:45:35 +0000
Subject: [PATCH] Add Barbican ingress Network Policy

Move Barbican Network Policies into a dedicated
override. Configure magnum to have the access to
Barbican.

Change-Id: Iad0f69666a28fabedd49b266c8a9de1ec3410dd6
---
 barbican/values.yaml                  | 18 +++--------------
 barbican/values_overrides/netpol.yaml | 29 +++++++++++++++++++++++++++
 2 files changed, 32 insertions(+), 15 deletions(-)
 create mode 100644 barbican/values_overrides/netpol.yaml

diff --git a/barbican/values.yaml b/barbican/values.yaml
index f98b245bed..4b7c67d920 100644
--- a/barbican/values.yaml
+++ b/barbican/values.yaml
@@ -197,21 +197,9 @@ network:
 network_policy:
   barbican:
     ingress:
-      - from:
-        - podSelector:
-            matchLabels:
-              application: barbican
-        - podSelector:
-            matchLabels:
-              application: ingress
-        - podSelector:
-            matchLabels:
-              application: horizon
-        ports:
-        - protocol: TCP
-          port: 80
-        - protocol: TCP
-          port: 9311
+      - {}
+    egress:
+      - {}
 
 bootstrap:
   enabled: false
diff --git a/barbican/values_overrides/netpol.yaml b/barbican/values_overrides/netpol.yaml
new file mode 100644
index 0000000000..6f887552a6
--- /dev/null
+++ b/barbican/values_overrides/netpol.yaml
@@ -0,0 +1,29 @@
+manifests:
+  network_policy: true
+
+network_policy:
+  barbican:
+    ingress:
+      - from:
+        - podSelector:
+            matchLabels:
+              application: barbican
+        - podSelector:
+            matchLabels:
+              application: ingress
+        - podSelector:
+            matchLabels:
+              application: horizon
+        - podSelector:
+            matchLabels:
+              application: heat
+        - podSelector:
+            matchLabels:
+              application: magnum
+        ports:
+        - protocol: TCP
+          port: 80
+        - protocol: TCP
+          port: 9311
+    egress:
+      - {}