Allow to set securityPolicy for GKE BackendConfig (#1125)

sentry-kubernetes · Feb 5, 2024 · cf7f15c · cf7f15c
1 parent 101502a
commit cf7f15c
Show file tree

Hide file tree

Showing 4 changed files with 13 additions and 3 deletions.
diff --git a/sentry/Chart.yaml b/sentry/Chart.yaml
@@ -2,7 +2,7 @@ apiVersion: v2
 name: sentry
 description: A Helm chart for Kubernetes
 type: application
-version: 21.2.0
+version: 21.3.0
 appVersion: 24.1.1
 dependencies:
   - name: memcached

diff --git a/sentry/templates/gke/backendconfig-sentry-relay.yaml b/sentry/templates/gke/backendconfig-sentry-relay.yaml
@@ -1,5 +1,5 @@
 {{- if and (.Values.ingress.enabled) (eq (default "nginx" .Values.ingress.regexPathStyle) "gke") }}
-apiVersion: cloud.google.com/v1beta1
+apiVersion: cloud.google.com/v1
 kind: BackendConfig
 metadata:
   name: {{ include "sentry.fullname" . }}-relay
@@ -18,4 +18,8 @@ spec:
     type: HTTP
     requestPath: {{ template "relay.healthCheck.requestPath" }}
     port: {{ template "relay.port" . }}
+{{- if .Values.relay.securityPolicy }}
+  securityPolicy:
+    name: {{ .Values.relay.securityPolicy }}
+{{- end }}
 {{- end }}
diff --git a/sentry/templates/gke/backendconfig-sentry-web.yaml b/sentry/templates/gke/backendconfig-sentry-web.yaml
@@ -1,5 +1,5 @@
 {{- if and (.Values.ingress.enabled) (eq (default "nginx" .Values.ingress.regexPathStyle) "gke") }}
-apiVersion: cloud.google.com/v1beta1
+apiVersion: cloud.google.com/v1
 kind: BackendConfig
 metadata:
   name: {{ include "sentry.fullname" . }}-web
@@ -18,4 +18,8 @@ spec:
     type: HTTP
     requestPath: {{ template "sentry.healthCheck.requestPath" }}
     port: {{ .Values.service.externalPort }}
+{{- if .Values.sentry.web.securityPolicy }}
+  securityPolicy:
+    name: {{ .Values.sentry.web.securityPolicy }}
+{{- end }}
 {{- end }}
diff --git a/sentry/values.yaml b/sentry/values.yaml
@@ -101,6 +101,7 @@ relay:
   affinity: {}
   nodeSelector: {}
   securityContext: {}
+  securityPolicy: ""
   containerSecurityContext: {}
   service:
     annotations: {}
@@ -146,6 +147,7 @@ sentry:
     affinity: {}
     nodeSelector: {}
     securityContext: {}
+    securityPolicy: ""
     containerSecurityContext: {}
     service:
       annotations: {}