Update ASO's NetworkPolicy to allow egress to SqlServer's default port (

#4283)
Azure · Sep 20, 2024 · 1f9373d · 1f9373d
1 parent 882ed6e
commit 1f9373d
Show file tree

Hide file tree

Showing 2 changed files with 10 additions and 0 deletions.
diff --git a/v2/charts/azure-service-operator/templates/networkpolicies.yaml b/v2/charts/azure-service-operator/templates/networkpolicies.yaml
@@ -53,6 +53,13 @@ spec:
     to:
     - ipBlock:
         cidr: {{ .Values.networkPolicies.postgresqlCIDR }}
+    # Required for communication with SQL servers when using SQL user object
+  - ports:
+      - port: 1433
+        protocol: TCP
+    to:
+      - ipBlock:
+          cidr: {{ .Values.networkPolicies.sqlCIDR }}
   podSelector:
     matchLabels:
       control-plane: controller-manager

diff --git a/v2/charts/azure-service-operator/values.yaml b/v2/charts/azure-service-operator/values.yaml
@@ -154,6 +154,9 @@ networkPolicies:
   mysqlCIDR: 0.0.0.0/0
   # Destination CIDR for talking to PostgreSQL servers
   postgresqlCIDR: 0.0.0.0/0
+  # Destination CIDR for talking to Sql servers
+  sqlCIDR: 0.0.0.0/0
+
 
 # Node labels for pod assignment
 # Ref: https://kubernetes.io/docs/user-guide/node-selection/