Skip to content

Installation: add NetworkPolicyManagement toggle#4626

Open
caseydavenport wants to merge 1 commit intotigera:masterfrom
caseydavenport:feature/network-policy-management
Open

Installation: add NetworkPolicyManagement toggle#4626
caseydavenport wants to merge 1 commit intotigera:masterfrom
caseydavenport:feature/network-policy-management

Conversation

@caseydavenport
Copy link
Copy Markdown
Member

Adds a global networkPolicyManagement toggle to the Installation resource.

  • When Disabled, the operator stops creating or updating NetworkPolicy and GlobalNetworkPolicy resources.
  • Switching from Enabled to Disabled actively deletes existing policies.
  • Logic is centralized in ComponentHandler.CreateOrUpdateOrDelete so it's transparent to all controllers.

Fixes projectcalico/calico#11935
Fixes #4331

Add `spec.networkPolicyManagement` to the `Installation` resource to enable or disable operator-managed NetworkPolicies.

- Add NetworkPolicyManagement field to InstallationSpec
- Implement transparent filtering in ComponentHandler to skip/delete policies when disabled
- Add verification tests in component_test.go and merge_test.go

Fixes projectcalico/calico#11935
Fixes tigera#4331
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

2 participants