From 12e7184afd1dc011af1c61ac2d8d91ef17058c23 Mon Sep 17 00:00:00 2001 From: JC Choi Date: Thu, 3 Feb 2022 04:29:41 +0000 Subject: [PATCH] Update doc/charts/gitlab/gitlab-pages/index.md --- doc/charts/gitlab/gitlab-pages/index.md | 54 ------------------------- 1 file changed, 54 deletions(-) diff --git a/doc/charts/gitlab/gitlab-pages/index.md b/doc/charts/gitlab/gitlab-pages/index.md index 3ea0520bc6..7ec5924044 100644 --- a/doc/charts/gitlab/gitlab-pages/index.md +++ b/doc/charts/gitlab/gitlab-pages/index.md @@ -148,60 +148,6 @@ extraVolumeMounts: | mountPath: /etc/example ``` -### Configuring the `networkpolicy` - -This section controls the -[NetworkPolicy](https://kubernetes.io/docs/concepts/services-networking/network-policies/). -This configuration is optional and is used to limit Egress and Ingress of the -Pods to specific endpoints. - -| Name | Type | Default | Description | -|:----------------- |:-------:|:------- |:----------- | -| `enabled` | Boolean | `false` | This setting enables the `NetworkPolicy` | -| `ingress.enabled` | Boolean | `false` | When set to `true`, the `Ingress` network policy will be activated. This will block all Ingress connections unless rules are specified. | -| `ingress.rules` | Array | `[]` | Rules for the Ingress policy, for details see and the example below | -| `egress.enabled` | Boolean | `false` | When set to `true`, the `Egress` network policy will be activated. This will block all egress connections unless rules are specified. | -| `egress.rules` | Array | `[]` | Rules for the egress policy, these for details see and the example below | - -### Example Network Policy - -The `gitlab-pages` service requires Ingress connections for port 80 and 443 and -Egress connections to various to default workhorse port 8181. This examples adds -the following network policy: - -- All Ingress requests from the network on TCP `0.0.0.0/0` port 80 and 443 are allowed -- All Egress requests to the network on UDP `10.0.0.0/8` port 53 are allowed for DNS -- All Egress requests to the network on TCP `10.0.0.0/8` port 8181 are allowed for Workhorse - -_Note the example provided is only an example and may not be complete_ - -```yaml -networkpolicy: - enabled: true - ingress: - enabled: true - rules: - - to: - - ipBlock: - cidr: 0.0.0.0/0 - ports: - - port: 80 - protocol: TCP - - port: 443 - protocol: TCP - egress: - enabled: true - rules: - - to: - - ipBlock: - cidr: 10.0.0.0/8 - ports: - - port: 8181 - protocol: TCP - - port: 53 - protocol: UDP -``` - ### TLS access to GitLab Pages To have TLS access to the GitLab Pages feature you must: -- GitLab