Add other network policy options

[Sean-Holcomb]

Tested flags with helm template
networkPolicy:
enabled: true
denyEgress: true

Source: cost-analyzer/templates/cost-analyzer-network-policy.yaml

apiVersion: networking.k8s.io/v1
kind: NetworkPolicy
metadata:
name: deny-egress
labels:
app.kubernetes.io/name: cost-analyzer
helm.sh/chart: cost-analyzer-1.75.1
app.kubernetes.io/instance: RELEASE-NAME
app.kubernetes.io/managed-by: Helm
app: cost-analyzer
spec:
podSelector:
matchLabels:
app.kubernetes.io/name: cost-analyzer
app.kubernetes.io/instance: RELEASE-NAME
app: cost-analyzer
policyTypes:

• Egress
  egress:
• to:
  • namespaceSelector: {}

---

networkPolicy:
enabled: true
denyEgress: false
sameNamespace: true

Source: cost-analyzer/templates/cost-analyzer-network-policy.yaml

apiVersion: networking.k8s.io/v1
kind: NetworkPolicy
metadata:
name: shared-namespace
namespace: kubecost
spec:
podSelector:
matchLabels:
app: prometheus
component: server
policyTypes:

• Ingress
  ingress:
• from:
  • podSelector:
    matchLabels:
    app.kubernetes.io/name: cost-analyzer
  • namespaceSelector:
    matchLabels:
    name: k8s-kubecost

---

networkPolicy:
enabled: true
denyEgress: false
sameNamespace: false
namespace: test

---

Source: cost-analyzer/templates/cost-analyzer-network-policy.yaml

apiVersion: networking.k8s.io/v1
kind: NetworkPolicy
metadata:
name: closed-traffic
namespace: test
spec:
podSelector:
matchLabels:
app.kubernetes.io/name: cost-analyzer
policyTypes:

• Ingress
  ingress:
• from:
  • podSelector:
    matchLabels:
    app.kubernetes.io/name: cost-analyzer
  • namespaceSelector:
    matchLabels:
    name: k8s-kubecost

---

[pierluigilenoci]

Works 👍🏻