mirror of
https://github.com/cozystack/cozystack.git
synced 2026-11-08 21:14:56 +09:00
Myasnikov Daniil
d0480f4561
The vendored flux-operator chart ships a NetworkPolicy on port 9080 gated by web.enabled + web.networkPolicy.create (default true). Cozystack already restricts ports 8080/8081/9080 via a CiliumClusterwideNetworkPolicy patched into the same chart, so the upstream policy is redundant if a user opts in to web.enabled: true. Pin networkPolicy.create to false to keep the Cilium policy as the single source of truth. Assisted-By: Claude <noreply@anthropic.com> Signed-off-by: Myasnikov Daniil <myasnikovdaniil2001@gmail.com>
23 lines
665 B
YAML
23 lines
665 B
YAML
flux-operator:
|
|
fullnameOverride: flux-operator
|
|
tolerations:
|
|
- key: node.kubernetes.io/not-ready
|
|
operator: Exists
|
|
effect: NoSchedule
|
|
hostNetwork: true
|
|
resources:
|
|
limits:
|
|
cpu: 100m
|
|
memory: 350Mi
|
|
requests:
|
|
cpu: 100m
|
|
memory: 350Mi
|
|
# Flux Status Web UI is opt-in. Override `web.enabled: true` (and configure
|
|
# `web.config` / `web.configSecretName` / `web.ingress` as needed) to enable.
|
|
# The upstream chart's NetworkPolicy is suppressed because Cozystack ships a
|
|
# CiliumClusterwideNetworkPolicy that already restricts ports 8080/8081/9080.
|
|
web:
|
|
enabled: false
|
|
networkPolicy:
|
|
create: false
|