Add netpol for job creating dbs (#159)

* Add netpol for job creating dbs

* add the netpol ...

* typo

* list

* Add ingress

* use selector labels

* Bump chart

Author: enys

charts/neo4jv5-internal/Chart.yaml

@@ -15,7 +15,7 @@ type: application
 # This is the chart version. This version number should be incremented each time you make changes
 # to the chart and its templates, including the app version.
 # Versions are expected to follow Semantic Versioning (https://semver.org/)
-version: 0.0.31
+version: 0.0.32
 
 # This is the version number of the application being deployed. This version number should be
 # incremented each time you make changes to the application. Versions are not expected to

charts/neo4jv5-internal/templates/post-install-netpol.yaml

@@ -0,0 +1,27 @@
+apiVersion: networking.k8s.io/v1
+kind: NetworkPolicy
+metadata:
+  name: "{{.Release.Name}}-job"
+  namespace: {{ .Release.Namespace }}
+  labels:
+    {{- include "neo4j-lke.labels" . | nindent 4 }}
+spec:
+  # https://editor.cilium.io/?id=rGvdpkpvU1mnl2Ct
+  podSelector:
+      matchLabels:
+        {{- include "neo4j-lke.selectorLabels" . | nindent 12 }}
+  policyTypes:
+    - Egress
+    - Ingress
+  ingress:
+    - from:
+      - podSelector:
+          matchLabels:
+            {{- include "neo4j-lke.selectorLabels" . | nindent 12 }}
+  egress:
+    - to:
+      - podSelector:
+          matchLabels:
+            {{- include "neo4j-lke.selectorLabels" . | nindent 12 }}
+      ports:
+      - port: 7687

charts/neo4jv5-internal/values.yaml

@@ -1,6 +1,7 @@
 # https://github.com/neo4j/helm-charts/blob/dev/neo4j/values.yaml
 
 neo4j:
+  disableLookups: true
 
   securityContext:
     runAsNonRoot: true