CHANGELOG.md

+# [2.0.0](https://gitlab.opencode.de/bmi/opendesk/components/platform-development/charts/opendesk-otterize/compare/v1.8.0...v2.0.0) (2024-04-07)
+
+
+### Features
+
+* **opendesk-otterize:** Remove NetworkPolicies for Ingress ([6b0a874](https://gitlab.opencode.de/bmi/opendesk/components/platform-development/charts/opendesk-otterize/commit/6b0a874e47a057be666960a8c7d5d400e722bedc))
+
+
+### BREAKING CHANGES
+
+* **opendesk-otterize:** Remove Ingress NetworkPolicies which are not needed with Otterize Intentens Operator v1.27
+
 # [1.8.0](https://gitlab.opencode.de/bmi/opendesk/components/platform-development/charts/opendesk-otterize/compare/v1.7.9...v1.8.0) (2024-04-07)
 
 

charts/opendesk-otterize/Chart.yaml

@@ -17,5 +17,5 @@ name: "opendesk-otterize"
 sources:
   - "https://gitlab.souvap-univention.de/souvap/tooling/charts/opendesk-otterize"
 type: "application"
-version: "1.8.0"
+version: "2.0.0"
 ...

charts/opendesk-otterize/README.md

@@ -14,14 +14,14 @@ To install the chart with the release name `my-release`, you have two options:
 
 ```console
 helm repo add opendesk-otterize https://gitlab.opencode.de/api/v4/projects/2293/packages/helm/stable
-helm install my-release --version 1.8.0 opendesk-otterize/opendesk-otterize
+helm install my-release --version 2.0.0 opendesk-otterize/opendesk-otterize
 ```
 
 ### Install via OCI Registry
 
 ```console
 helm repo add opendesk-otterize oci://registry.opencode.de/bmi/opendesk/components/platform-development/charts/opendesk-otterize
-helm install my-release --version 1.8.0 opendesk-otterize/opendesk-otterize
+helm install my-release --version 2.0.0 opendesk-otterize/opendesk-otterize
 ```
 
 ## Requirements

charts/opendesk-otterize/templates/ClientIntents/opendesk-keycloak-bootstrap.yaml

@@ -7,7 +7,7 @@ SPDX-License-Identifier: Apache-2.0
 apiVersion: {{ .Values.clientIntents.apiVersion | quote }}
 kind: "ClientIntents"
 metadata:
-  name: "{{ include "common.names.fullname" . }}-opendesk-keycloak-bootstrap-proxy"
+  name: "{{ include "common.names.fullname" . }}-opendesk-keycloak-bootstrap"
   namespace: {{ .Values.apps.univentionManagementStack.namespace | default .Release.Namespace | quote }}
   labels:
     {{- include "common.labels.standard" . | nindent 4 }}
@@ -19,7 +19,7 @@ metadata:
   {{- end }}
 spec:
   service:
-    name: "opendesk-keycloak-bootstrap-proxy"
+    name: "opendesk-keycloak-bootstrap"
   calls:
     - name: {{ printf "%s.%s" "ums-keycloak" (coalesce .Values.apps.univentionManagementStack.namespace .Release.Namespace) | quote }}
 ...

charts/opendesk-otterize/templates/NetworkPolicies/ingress-collabora.yaml

-{{/*
-SPDX-FileCopyrightText: 2023 Bundesministerium des Innern und für Heimat, PG ZenDiS "Projektgruppe für Aufbau ZenDiS"
-SPDX-License-Identifier: Apache-2.0
-*/}}
-{{- if and .Values.apps.collabora.enabled .Values.networkPolicies.enabled }}
----
-apiVersion: "networking.k8s.io/v1"
-kind: "NetworkPolicy"
-metadata:
-  name: "{{ include "common.names.fullname" . }}-ingress-collabora"
-  namespace: {{ .Values.apps.collabora.namespace | default .Release.Namespace | quote }}
-  labels:
-    {{- include "common.labels.standard" . | nindent 4 }}
-    {{- if .Values.additionalLabels }}
-    {{- include "common.tplvalues.render" ( dict "value" .Values.additionalLabels "context" . ) | nindent 4 }}
-    {{- end }}
-  {{- if .Values.additionalAnnotations }}
-  annotations: {{- include "common.tplvalues.render" ( dict "value" .Values.additionalAnnotations "context" . ) | nindent 4 }}
-  {{- end }}
-spec:
-  podSelector:
-    matchLabels:
-      app.kubernetes.io/name: "collabora-online"
-  ingress:
-    - from:
-        - podSelector: {{ toYaml .Values.ingressController.podSelector | nindent 12 }}
-          namespaceSelector:
-            matchLabels:
-              kubernetes.io/metadata.name: {{ .Values.ingressController.namespace | quote }}
-  policyTypes:
-    - "Ingress"
-...
-{{- end }}

charts/opendesk-otterize/templates/NetworkPolicies/ingress-cryptpad.yaml

-{{/*
-SPDX-FileCopyrightText: 2023 Bundesministerium des Innern und für Heimat, PG ZenDiS "Projektgruppe für Aufbau ZenDiS"
-SPDX-License-Identifier: Apache-2.0
-*/}}
-{{- if and .Values.apps.cryptpad.enabled .Values.networkPolicies.enabled }}
----
-apiVersion: "networking.k8s.io/v1"
-kind: "NetworkPolicy"
-metadata:
-  name: "{{ include "common.names.fullname" . }}-ingress-cryptpad"
-  namespace: {{ .Values.apps.cryptpad.namespace | default .Release.Namespace | quote }}
-  labels:
-    {{- include "common.labels.standard" . | nindent 4 }}
-    {{- if .Values.additionalLabels }}
-    {{- include "common.tplvalues.render" ( dict "value" .Values.additionalLabels "context" . ) | nindent 4 }}
-    {{- end }}
-  {{- if .Values.additionalAnnotations }}
-  annotations: {{- include "common.tplvalues.render" ( dict "value" .Values.additionalAnnotations "context" . ) | nindent 4 }}
-  {{- end }}
-spec:
-  podSelector:
-    matchLabels:
-      app.kubernetes.io/name: "cryptpad"
-  ingress:
-    - from:
-        - podSelector: {{ toYaml .Values.ingressController.podSelector | nindent 12 }}
-          namespaceSelector:
-            matchLabels:
-              kubernetes.io/metadata.name: {{ .Values.ingressController.namespace | quote }}
-  policyTypes:
-    - "Ingress"
-...
-{{- end }}

charts/opendesk-otterize/templates/NetworkPolicies/ingress-intercom-service.yaml

-{{/*
-SPDX-FileCopyrightText: 2023 Bundesministerium des Innern und für Heimat, PG ZenDiS "Projektgruppe für Aufbau ZenDiS"
-SPDX-License-Identifier: Apache-2.0
-*/}}
-{{- if and .Values.apps.intercom.enabled .Values.networkPolicies.enabled }}
----
-apiVersion: "networking.k8s.io/v1"
-kind: "NetworkPolicy"
-metadata:
-  name: "{{ include "common.names.fullname" . }}-ingress-intercom-service"
-  namespace: {{ .Values.apps.intercom.namespace | default .Release.Namespace | quote }}
-  labels:
-    {{- include "common.labels.standard" . | nindent 4 }}
-    {{- if .Values.additionalLabels }}
-    {{- include "common.tplvalues.render" ( dict "value" .Values.additionalLabels "context" . ) | nindent 4 }}
-    {{- end }}
-  {{- if .Values.additionalAnnotations }}
-  annotations: {{- include "common.tplvalues.render" ( dict "value" .Values.additionalAnnotations "context" . ) | nindent 4 }}
-  {{- end }}
-spec:
-  podSelector:
-    matchLabels:
-      app.kubernetes.io/name: "intercom-service"
-  ingress:
-    - from:
-        - podSelector: {{ toYaml .Values.ingressController.podSelector | nindent 12 }}
-          namespaceSelector:
-            matchLabels:
-              kubernetes.io/metadata.name: {{ .Values.ingressController.namespace | quote }}
-  policyTypes:
-    - "Ingress"
-...
-{{- end }}

charts/opendesk-otterize/templates/NetworkPolicies/ingress-jitsi.yaml

-{{/*
-SPDX-FileCopyrightText: 2023 Bundesministerium des Innern und für Heimat, PG ZenDiS "Projektgruppe für Aufbau ZenDiS"
-SPDX-License-Identifier: Apache-2.0
-*/}}
-{{- if and .Values.apps.jitsi.enabled .Values.networkPolicies.enabled }}
----
-apiVersion: "networking.k8s.io/v1"
-kind: "NetworkPolicy"
-metadata:
-  name: "{{ include "common.names.fullname" . }}-ingress-jitsi"
-  namespace: {{ .Values.apps.jitsi.namespace | default .Release.Namespace | quote }}
-  labels:
-    {{- include "common.labels.standard" . | nindent 4 }}
-    {{- if .Values.additionalLabels }}
-    {{- include "common.tplvalues.render" ( dict "value" .Values.additionalLabels "context" . ) | nindent 4 }}
-    {{- end }}
-  {{- if .Values.additionalAnnotations }}
-  annotations: {{- include "common.tplvalues.render" ( dict "value" .Values.additionalAnnotations "context" . ) | nindent 4 }}
-  {{- end }}
-spec:
-  podSelector:
-    matchLabels:
-      app.kubernetes.io/name: "jitsi"
-      app.kubernetes.io/component: "web"
-  ingress:
-    - from:
-        - podSelector: {{ toYaml .Values.ingressController.podSelector | nindent 12 }}
-          namespaceSelector:
-            matchLabels:
-              kubernetes.io/metadata.name: {{ .Values.ingressController.namespace | quote }}
-  policyTypes:
-    - "Ingress"
-...
-{{- end }}

charts/opendesk-otterize/templates/NetworkPolicies/ingress-matrix-neoboard-widget.yaml

-{{/*
-SPDX-FileCopyrightText: 2023 Bundesministerium des Innern und für Heimat, PG ZenDiS "Projektgruppe für Aufbau ZenDiS"
-SPDX-License-Identifier: Apache-2.0
-*/}}
-{{- if and .Values.apps.element.enabled .Values.networkPolicies.enabled }}
----
-apiVersion: "networking.k8s.io/v1"
-kind: "NetworkPolicy"
-metadata:
-  name: "{{ include "common.names.fullname" . }}-ingress-matrix-neoboard-widget"
-  namespace: {{ .Values.apps.element.namespace | default .Release.Namespace | quote }}
-  labels:
-    {{- include "common.labels.standard" . | nindent 4 }}
-    {{- if .Values.additionalLabels }}
-    {{- include "common.tplvalues.render" ( dict "value" .Values.additionalLabels "context" . ) | nindent 4 }}
-    {{- end }}
-  {{- if .Values.additionalAnnotations }}
-  annotations: {{- include "common.tplvalues.render" ( dict "value" .Values.additionalAnnotations "context" . ) | nindent 4 }}
-  {{- end }}
-spec:
-  podSelector:
-    matchLabels:
-      app.kubernetes.io/name: "matrix-neoboard-widget"
-  ingress:
-    - from:
-        - podSelector: {{ toYaml .Values.ingressController.podSelector | nindent 12 }}
-          namespaceSelector:
-            matchLabels:
-              kubernetes.io/metadata.name: {{ .Values.ingressController.namespace | quote }}
-  policyTypes:
-    - "Ingress"
-...
-{{- end }}

charts/opendesk-otterize/templates/NetworkPolicies/ingress-matrix-neochoice-widget.yaml

-{{/*
-SPDX-FileCopyrightText: 2023 Bundesministerium des Innern und für Heimat, PG ZenDiS "Projektgruppe für Aufbau ZenDiS"
-SPDX-License-Identifier: Apache-2.0
-*/}}
-{{- if and .Values.apps.element.enabled .Values.networkPolicies.enabled }}
----
-apiVersion: "networking.k8s.io/v1"
-kind: "NetworkPolicy"
-metadata:
-  name: "{{ include "common.names.fullname" . }}-ingress-matrix-neochoice-widget"
-  namespace: {{ .Values.apps.element.namespace | default .Release.Namespace | quote }}
-  labels:
-    {{- include "common.labels.standard" . | nindent 4 }}
-    {{- if .Values.additionalLabels }}
-    {{- include "common.tplvalues.render" ( dict "value" .Values.additionalLabels "context" . ) | nindent 4 }}
-    {{- end }}
-  {{- if .Values.additionalAnnotations }}
-  annotations: {{- include "common.tplvalues.render" ( dict "value" .Values.additionalAnnotations "context" . ) | nindent 4 }}
-  {{- end }}
-spec:
-  podSelector:
-    matchLabels:
-      app.kubernetes.io/name: "matrix-neochoice-widget"
-  ingress:
-    - from:
-        - podSelector: {{ toYaml .Values.ingressController.podSelector | nindent 12 }}
-          namespaceSelector:
-            matchLabels:
-              kubernetes.io/metadata.name: {{ .Values.ingressController.namespace | quote }}
-  policyTypes:
-    - "Ingress"
-...
-{{- end }}

charts/opendesk-otterize/templates/NetworkPolicies/ingress-matrix-neodatefix-bot.yaml

-{{/*
-SPDX-FileCopyrightText: 2023 Bundesministerium des Innern und für Heimat, PG ZenDiS "Projektgruppe für Aufbau ZenDiS"
-SPDX-License-Identifier: Apache-2.0
-*/}}
-{{- if and .Values.apps.element.enabled .Values.networkPolicies.enabled }}
----
-apiVersion: "networking.k8s.io/v1"
-kind: "NetworkPolicy"
-metadata:
-  name: "{{ include "common.names.fullname" . }}-ingress-matrix-neodatefix-bot"
-  namespace: {{ .Values.apps.element.namespace | default .Release.Namespace | quote }}
-  labels:
-    {{- include "common.labels.standard" . | nindent 4 }}
-    {{- if .Values.additionalLabels }}
-    {{- include "common.tplvalues.render" ( dict "value" .Values.additionalLabels "context" . ) | nindent 4 }}
-    {{- end }}
-  {{- if .Values.additionalAnnotations }}
-  annotations: {{- include "common.tplvalues.render" ( dict "value" .Values.additionalAnnotations "context" . ) | nindent 4 }}
-  {{- end }}
-spec:
-  podSelector:
-    matchLabels:
-      app.kubernetes.io/name: "matrix-neodatefix-bot"
-  ingress:
-    - from:
-        - podSelector: {{ toYaml .Values.ingressController.podSelector | nindent 12 }}
-          namespaceSelector:
-            matchLabels:
-              kubernetes.io/metadata.name: {{ .Values.ingressController.namespace | quote }}
-  policyTypes:
-    - "Ingress"
-...
-{{- end }}

charts/opendesk-otterize/templates/NetworkPolicies/ingress-matrix-neodatefix-widget.yaml

-{{/*
-SPDX-FileCopyrightText: 2023 Bundesministerium des Innern und für Heimat, PG ZenDiS "Projektgruppe für Aufbau ZenDiS"
-SPDX-License-Identifier: Apache-2.0
-*/}}
-{{- if and .Values.apps.element.enabled .Values.networkPolicies.enabled }}
----
-apiVersion: "networking.k8s.io/v1"
-kind: "NetworkPolicy"
-metadata:
-  name: "{{ include "common.names.fullname" . }}-ingress-matrix-neodatefix-widget"
-  namespace: {{ .Values.apps.element.namespace | default .Release.Namespace | quote }}
-  labels:
-    {{- include "common.labels.standard" . | nindent 4 }}
-    {{- if .Values.additionalLabels }}
-    {{- include "common.tplvalues.render" ( dict "value" .Values.additionalLabels "context" . ) | nindent 4 }}
-    {{- end }}
-  {{- if .Values.additionalAnnotations }}
-  annotations: {{- include "common.tplvalues.render" ( dict "value" .Values.additionalAnnotations "context" . ) | nindent 4 }}
-  {{- end }}
-spec:
-  podSelector:
-    matchLabels:
-      app.kubernetes.io/name: "matrix-neodatefix-widget"
-  ingress:
-    - from:
-        - podSelector: {{ toYaml .Values.ingressController.podSelector | nindent 12 }}
-          namespaceSelector:
-            matchLabels:
-              kubernetes.io/metadata.name: {{ .Values.ingressController.namespace | quote }}
-  policyTypes:
-    - "Ingress"
-...
-{{- end }}

charts/opendesk-otterize/templates/NetworkPolicies/ingress-minio.yaml

-{{/*
-SPDX-FileCopyrightText: 2023 Bundesministerium des Innern und für Heimat, PG ZenDiS "Projektgruppe für Aufbau ZenDiS"
-SPDX-License-Identifier: Apache-2.0
-*/}}
-{{- if and .Values.apps.minio.enabled .Values.networkPolicies.enabled }}
----
-apiVersion: "networking.k8s.io/v1"
-kind: "NetworkPolicy"
-metadata:
-  name: "{{ include "common.names.fullname" . }}-ingress-minio"
-  namespace: {{ .Values.apps.minio.namespace | default .Release.Namespace | quote }}
-  labels:
-    {{- include "common.labels.standard" . | nindent 4 }}
-    {{- if .Values.additionalLabels }}
-    {{- include "common.tplvalues.render" ( dict "value" .Values.additionalLabels "context" . ) | nindent 4 }}
-    {{- end }}
-  {{- if .Values.additionalAnnotations }}
-  annotations: {{- include "common.tplvalues.render" ( dict "value" .Values.additionalAnnotations "context" . ) | nindent 4 }}
-  {{- end }}
-spec:
-  podSelector:
-    matchLabels:
-      app.kubernetes.io/name: "minio"
-  ingress:
-    - from:
-        - podSelector: {{ toYaml .Values.ingressController.podSelector | nindent 12 }}
-          namespaceSelector:
-            matchLabels:
-              kubernetes.io/metadata.name: {{ .Values.ingressController.namespace | quote }}
-  policyTypes:
-    - "Ingress"
-...
-{{- end }}

charts/opendesk-otterize/templates/NetworkPolicies/ingress-nextcloud.yaml

-{{/*
-SPDX-FileCopyrightText: 2023 Bundesministerium des Innern und für Heimat, PG ZenDiS "Projektgruppe für Aufbau ZenDiS"
-SPDX-License-Identifier: Apache-2.0
-*/}}
-{{- if and .Values.apps.nextcloud.enabled .Values.networkPolicies.enabled }}
----
-apiVersion: "networking.k8s.io/v1"
-kind: "NetworkPolicy"
-metadata:
-  name: "{{ include "common.names.fullname" . }}-ingress-nextcloud"
-  namespace: {{ .Values.apps.nextcloud.namespace | default .Release.Namespace | quote }}
-  labels:
-    {{- include "common.labels.standard" . | nindent 4 }}
-    {{- if .Values.additionalLabels }}
-    {{- include "common.tplvalues.render" ( dict "value" .Values.additionalLabels "context" . ) | nindent 4 }}
-    {{- end }}
-  {{- if .Values.additionalAnnotations }}
-  annotations: {{- include "common.tplvalues.render" ( dict "value" .Values.additionalAnnotations "context" . ) | nindent 4 }}
-  {{- end }}
-spec:
-  podSelector:
-    matchLabels:
-      app.kubernetes.io/name: "nextcloud"
-      app.kubernetes.io/component: "app"
-  ingress:
-    - from:
-        - podSelector: {{ toYaml .Values.ingressController.podSelector | nindent 12 }}
-          namespaceSelector:
-            matchLabels:
-              kubernetes.io/metadata.name: {{ .Values.ingressController.namespace | quote }}
-  policyTypes:
-    - "Ingress"
-...
-{{- end }}

charts/opendesk-otterize/templates/NetworkPolicies/ingress-opendesk-element.yaml

-{{/*
-SPDX-FileCopyrightText: 2023 Bundesministerium des Innern und für Heimat, PG ZenDiS "Projektgruppe für Aufbau ZenDiS"
-SPDX-License-Identifier: Apache-2.0
-*/}}
-{{- if and .Values.apps.element.enabled .Values.networkPolicies.enabled }}
----
-apiVersion: "networking.k8s.io/v1"
-kind: "NetworkPolicy"
-metadata:
-  name: "{{ include "common.names.fullname" . }}-ingress-opendesk-element"
-  namespace: {{ .Values.apps.element.namespace | default .Release.Namespace | quote }}
-  labels:
-    {{- include "common.labels.standard" . | nindent 4 }}
-    {{- if .Values.additionalLabels }}
-    {{- include "common.tplvalues.render" ( dict "value" .Values.additionalLabels "context" . ) | nindent 4 }}
-    {{- end }}
-  {{- if .Values.additionalAnnotations }}
-  annotations: {{- include "common.tplvalues.render" ( dict "value" .Values.additionalAnnotations "context" . ) | nindent 4 }}
-  {{- end }}
-spec:
-  podSelector:
-    matchLabels:
-      app.kubernetes.io/name: "opendesk-element"
-  ingress:
-    - from:
-        - podSelector: {{ toYaml .Values.ingressController.podSelector | nindent 12 }}
-          namespaceSelector:
-            matchLabels:
-              kubernetes.io/metadata.name: {{ .Values.ingressController.namespace | quote }}
-  policyTypes:
-    - "Ingress"
-...
-{{- end }}

charts/opendesk-otterize/templates/NetworkPolicies/ingress-opendesk-synapse-web.yaml

-{{/*
-SPDX-FileCopyrightText: 2023 Bundesministerium des Innern und für Heimat, PG ZenDiS "Projektgruppe für Aufbau ZenDiS"
-SPDX-License-Identifier: Apache-2.0
-*/}}
-{{- if and .Values.apps.element.enabled .Values.networkPolicies.enabled }}
----
-apiVersion: "networking.k8s.io/v1"
-kind: "NetworkPolicy"
-metadata:
-  name: "{{ include "common.names.fullname" . }}-ingress-opendesk-synapse-web"
-  namespace: {{ .Values.apps.element.namespace | default .Release.Namespace | quote }}
-  labels:
-    {{- include "common.labels.standard" . | nindent 4 }}
-    {{- if .Values.additionalLabels }}
-    {{- include "common.tplvalues.render" ( dict "value" .Values.additionalLabels "context" . ) | nindent 4 }}
-    {{- end }}
-  {{- if .Values.additionalAnnotations }}
-  annotations: {{- include "common.tplvalues.render" ( dict "value" .Values.additionalAnnotations "context" . ) | nindent 4 }}
-  {{- end }}
-spec:
-  podSelector:
-    matchLabels:
-      app.kubernetes.io/name: "opendesk-synapse-web"
-  ingress:
-    - from:
-        - podSelector: {{ toYaml .Values.ingressController.podSelector | nindent 12 }}
-          namespaceSelector:
-            matchLabels:
-              kubernetes.io/metadata.name: {{ .Values.ingressController.namespace | quote }}
-  policyTypes:
-    - "Ingress"
-...
-{{- end }}

charts/opendesk-otterize/templates/NetworkPolicies/ingress-opendesk-well-known.yaml

-{{/*
-SPDX-FileCopyrightText: 2023 Bundesministerium des Innern und für Heimat, PG ZenDiS "Projektgruppe für Aufbau ZenDiS"
-SPDX-License-Identifier: Apache-2.0
-*/}}
-{{- if and .Values.apps.element.enabled .Values.networkPolicies.enabled }}
----
-apiVersion: "networking.k8s.io/v1"
-kind: "NetworkPolicy"
-metadata:
-  name: "{{ include "common.names.fullname" . }}-ingress-opendesk-well-known"
-  namespace: {{ .Values.apps.element.namespace | default .Release.Namespace | quote }}
-  labels:
-    {{- include "common.labels.standard" . | nindent 4 }}
-    {{- if .Values.additionalLabels }}
-    {{- include "common.tplvalues.render" ( dict "value" .Values.additionalLabels "context" . ) | nindent 4 }}
-    {{- end }}
-  {{- if .Values.additionalAnnotations }}
-  annotations: {{- include "common.tplvalues.render" ( dict "value" .Values.additionalAnnotations "context" . ) | nindent 4 }}
-  {{- end }}
-spec:
-  podSelector:
-    matchLabels:
-      app.kubernetes.io/name: "opendesk-well-known"
-  ingress:
-    - from:
-        - podSelector: {{ toYaml .Values.ingressController.podSelector | nindent 12 }}
-          namespaceSelector:
-            matchLabels:
-              kubernetes.io/metadata.name: {{ .Values.ingressController.namespace | quote }}
-  policyTypes:
-    - "Ingress"
-...
-{{- end }}

charts/opendesk-otterize/templates/NetworkPolicies/ingress-openproject.yaml

-{{/*
-SPDX-FileCopyrightText: 2023 Bundesministerium des Innern und für Heimat, PG ZenDiS "Projektgruppe für Aufbau ZenDiS"
-SPDX-License-Identifier: Apache-2.0
-*/}}
-{{- if and .Values.apps.openproject.enabled .Values.networkPolicies.enabled }}
----
-apiVersion: "networking.k8s.io/v1"
-kind: "NetworkPolicy"
-metadata:
-  name: "{{ include "common.names.fullname" . }}-ingress-openproject"
-  namespace: {{ .Values.apps.openproject.namespace | default .Release.Namespace | quote }}
-  labels:
-    {{- include "common.labels.standard" . | nindent 4 }}
-    {{- if .Values.additionalLabels }}
-    {{- include "common.tplvalues.render" ( dict "value" .Values.additionalLabels "context" . ) | nindent 4 }}
-    {{- end }}
-  {{- if .Values.additionalAnnotations }}
-  annotations: {{- include "common.tplvalues.render" ( dict "value" .Values.additionalAnnotations "context" . ) | nindent 4 }}
-  {{- end }}
-spec:
-  podSelector:
-    matchLabels:
-      app.kubernetes.io/name: "openproject"
-  ingress:
-    - from:
-        - podSelector: {{ toYaml .Values.ingressController.podSelector | nindent 12 }}
-          namespaceSelector:
-            matchLabels:
-              kubernetes.io/metadata.name: {{ .Values.ingressController.namespace | quote }}
-  policyTypes:
-    - "Ingress"
-...
-{{- end }}

charts/opendesk-otterize/templates/NetworkPolicies/ingress-ums-keycloak-extensions-proxy.yaml

-{{/*
-SPDX-FileCopyrightText: 2023 Bundesministerium des Innern und für Heimat, PG ZenDiS "Projektgruppe für Aufbau ZenDiS"
-SPDX-License-Identifier: Apache-2.0
-*/}}
-{{- if and .Values.apps.univentionManagementStack.enabled .Values.networkPolicies.enabled }}
----
-apiVersion: "networking.k8s.io/v1"
-kind: "NetworkPolicy"
-metadata:
-  name: "{{ include "common.names.fullname" . }}-ingress-ums-keycloak-extensions-proxy"
-  namespace: {{ .Values.apps.univentionManagementStack.namespace | default .Release.Namespace | quote }}
-  labels:
-    {{- include "common.labels.standard" . | nindent 4 }}
-    {{- if .Values.additionalLabels }}
-    {{- include "common.tplvalues.render" ( dict "value" .Values.additionalLabels "context" . ) | nindent 4 }}
-    {{- end }}
-  {{- if .Values.additionalAnnotations }}
-  annotations: {{- include "common.tplvalues.render" ( dict "value" .Values.additionalAnnotations "context" . ) | nindent 4 }}
-  {{- end }}
-spec:
-  podSelector:
-    matchLabels:
-      app.kubernetes.io/name: "proxy"
-      app.kubernetes.io/instance: "ums-keycloak-extensions"
-  ingress:
-    - from:
-        - podSelector: {{ toYaml .Values.ingressController.podSelector | nindent 12 }}
-          namespaceSelector:
-            matchLabels:
-              kubernetes.io/metadata.name: {{ .Values.ingressController.namespace | quote }}
-  policyTypes:
-    - "Ingress"
-...
-{{- end }}

charts/opendesk-otterize/templates/NetworkPolicies/ingress-ums-keycloak.yaml

-{{/*
-SPDX-FileCopyrightText: 2023 Bundesministerium des Innern und für Heimat, PG ZenDiS "Projektgruppe für Aufbau ZenDiS"
-SPDX-License-Identifier: Apache-2.0
-*/}}
-{{- if and .Values.apps.univentionManagementStack.enabled .Values.networkPolicies.enabled }}
----
-apiVersion: "networking.k8s.io/v1"
-kind: "NetworkPolicy"
-metadata:
-  name: "{{ include "common.names.fullname" . }}-ingress-ums-keycloak"
-  namespace: {{ .Values.apps.univentionManagementStack.namespace | default .Release.Namespace | quote }}
-  labels:
-    {{- include "common.labels.standard" . | nindent 4 }}
-    {{- if .Values.additionalLabels }}
-    {{- include "common.tplvalues.render" ( dict "value" .Values.additionalLabels "context" . ) | nindent 4 }}
-    {{- end }}
-  {{- if .Values.additionalAnnotations }}
-  annotations: {{- include "common.tplvalues.render" ( dict "value" .Values.additionalAnnotations "context" . ) | nindent 4 }}
-  {{- end }}
-spec:
-  podSelector:
-    matchLabels:
-      app.kubernetes.io/name: "ums-keycloak"
-  ingress:
-    - from:
-        - podSelector: {{ toYaml .Values.ingressController.podSelector | nindent 12 }}
-          namespaceSelector:
-            matchLabels:
-              kubernetes.io/metadata.name: {{ .Values.ingressController.namespace | quote }}
-  policyTypes:
-    - "Ingress"
-...
-{{- end }}