fix: agentURL and netpols

defenseunicorns · Mar 11, 2024 · 604b0ff · 604b0ff
1 parent 162b201
commit 604b0ff
Show file tree

Hide file tree

Showing 2 changed files with 10 additions and 3 deletions.
diff --git a/chart/templates/uds-package.yaml b/chart/templates/uds-package.yaml
@@ -20,8 +20,15 @@ spec:
         host: jenkins
         port: 8080
     allow:
+      - direction: Ingress
+        remoteGenerated: IntraNamespace
+      - direction: Egress
+        remoteGenerated: IntraNamespace
       - direction: Egress
         podLabels:
           app.kubernetes.io/name: jenkins
         port: 443
-        description: "Jenkins-plugins"
+        description: "Jenkins-plugins & SSO"
+      - direction: Egress
+        # todo: this is over permissive, need to scope it down
+        remoteGenerated: KubeAPI
diff --git a/values/common.yaml b/values/common.yaml
@@ -132,10 +132,10 @@ controller:
 
 agent:
   enabled: true
-  jnlpregistry: registry1.dso.mil
+  jenkinsUrl: https://jenkins.###ZARF_VAR_DOMAIN###
   image:
     # -- Repository to pull the agent jnlp image from
-    repository: "ironbank/opensource/jenkins/inbound-agent"
+    repository: "registry1.dso.mil/ironbank/opensource/jenkins/inbound-agent"
     # -- Tag of the image to pull
     tag: "3186.vc3b_7249b_87eb_-1"
   resources: