)]}'
{"/COMMIT_MSG":[{"author":{"_account_id":8898,"name":"Chris Wedgwood","email":"cw@f00f.org","username":"anticw"},"change_message_id":"d47593b155bde433e71c9202a89b0e533570e02d","unresolved":false,"context_lines":[{"line_number":6,"context_line":""},{"line_number":7,"context_line":"Add network policy toolkit function"},{"line_number":8,"context_line":""},{"line_number":9,"context_line":"This patch set implements the helm toolkit function to generate a kubernetes"},{"line_number":10,"context_line":"network policy manifest based on overrideable values. This also adds a"},{"line_number":11,"context_line":"chart that shuts down all the ingress and egress traffics in the namespace."},{"line_number":12,"context_line":"This can be used to ensure the whitelisted network policy works as intended."}],"source_content_type":"text/x-gerrit-commit-message","patch_set":28,"id":"3f79a3b5_c1bb67c1","line":9,"range":{"start_line":9,"start_character":66,"end_line":9,"end_character":76},"updated":"2018-09-19 03:19:57.000000000","message":"wrap?","commit_id":"f09a3295d806b1723082ee3c11c22e999ca8b17e"},{"author":{"_account_id":20466,"name":"Tin Lam","email":"tin@lam.wtf","username":"tinlam"},"change_message_id":"84e4ea288a29ee9d4adf0358a6ac6a4f0b6faee8","unresolved":false,"context_lines":[{"line_number":6,"context_line":""},{"line_number":7,"context_line":"Add network policy toolkit function"},{"line_number":8,"context_line":""},{"line_number":9,"context_line":"This patch set implements the helm toolkit function to generate a kubernetes"},{"line_number":10,"context_line":"network policy manifest based on overrideable values. This also adds a"},{"line_number":11,"context_line":"chart that shuts down all the ingress and egress traffics in the namespace."},{"line_number":12,"context_line":"This can be used to ensure the whitelisted network policy works as intended."}],"source_content_type":"text/x-gerrit-commit-message","patch_set":28,"id":"3f79a3b5_61561361","line":9,"range":{"start_line":9,"start_character":66,"end_line":9,"end_character":76},"in_reply_to":"3f79a3b5_c1bb67c1","updated":"2018-09-19 03:37:09.000000000","message":"Done","commit_id":"f09a3295d806b1723082ee3c11c22e999ca8b17e"}],"helm-toolkit/templates/manifests/_network_policy.tpl":[{"author":{"_account_id":23928,"name":"Pete Birley","email":"petebirley@gmail.com","username":"portdirect"},"change_message_id":"3d9a31f656b27a401ffcc34d8118bdbf7bddd1bb","unresolved":false,"context_lines":[{"line_number":35,"context_line":"  ingress:"},{"line_number":36,"context_line":"{{ $envAll.Values.network_policy.ingress | toYaml | indent 4 }}"},{"line_number":37,"context_line":"{{- end }}"},{"line_number":38,"context_line":"  egress:"},{"line_number":39,"context_line":"    - to:"},{"line_number":40,"context_line":"      - namespaceSelector:"},{"line_number":41,"context_line":"          matchLabels:"},{"line_number":42,"context_line":"            name: default"},{"line_number":43,"context_line":"      ports:"},{"line_number":44,"context_line":"      - port: 80"},{"line_number":45,"context_line":"        protocol: TCP"},{"line_number":46,"context_line":"      - port: 443"},{"line_number":47,"context_line":"        protocol: TCP"},{"line_number":48,"context_line":"      - port: 6443"},{"line_number":49,"context_line":"        protocol: TCP"},{"line_number":50,"context_line":"    - to:"},{"line_number":51,"context_line":"      - namespaceSelector:"},{"line_number":52,"context_line":"          matchLabels:"},{"line_number":53,"context_line":"            name: kube-system"},{"line_number":54,"context_line":"      ports:"},{"line_number":55,"context_line":"      - port: 53"},{"line_number":56,"context_line":"        protocol: UDP"},{"line_number":57,"context_line":"      - port: 53"},{"line_number":58,"context_line":"        protocol: TCP"},{"line_number":59,"context_line":"{{- if hasKey (index $envAll.Values \"network_policy\") \"egress\" }}"},{"line_number":60,"context_line":"{{ $envAll.Values.network_policy.egress | toYaml | indent 4 }}"},{"line_number":61,"context_line":"{{- end }}"}],"source_content_type":"text/x-smarty","patch_set":24,"id":"3f79a3b5_daca7718","line":58,"range":{"start_line":38,"start_character":0,"end_line":58,"end_character":21},"updated":"2018-09-18 19:13:46.000000000","message":"this needs to be specified via the endpoints stanza.","commit_id":"bd89392ec9210f77be549794ff78bbce0d13ae34"},{"author":{"_account_id":22477,"name":"Matt McEuen","email":"matt.mceuen@att.com","username":"mattmceuen"},"change_message_id":"2f474078fcbb799d18fed8c0bae7bd9269f8fd99","unresolved":false,"context_lines":[{"line_number":17,"context_line":"  Creates a network policy manifest for services."},{"line_number":18,"context_line":"values: |"},{"line_number":19,"context_line":"  network_policy:"},{"line_number":20,"context_line":"    ingress:"},{"line_number":21,"context_line":"      - from:"},{"line_number":22,"context_line":"        - podSelector:"},{"line_number":23,"context_line":"            matchLabels:"}],"source_content_type":"text/x-smarty","patch_set":39,"id":"3f79a3b5_683712e6","line":20,"updated":"2018-10-10 19:07:58.000000000","message":"I think you need to add the label into the structure here, like\n  network_policy:\n    myLabel:\n      ingress:\nright?","commit_id":"ce258769bf858c9af0fae014a94caac542526b71"},{"author":{"_account_id":28592,"name":"Mike Pham","email":"tp6510@att.com","username":"tp6510"},"change_message_id":"6233d7d511bb33a55c5f0ba370523106fe37034e","unresolved":false,"context_lines":[{"line_number":17,"context_line":"  Creates a network policy manifest for services."},{"line_number":18,"context_line":"values: |"},{"line_number":19,"context_line":"  network_policy:"},{"line_number":20,"context_line":"    ingress:"},{"line_number":21,"context_line":"      - from:"},{"line_number":22,"context_line":"        - podSelector:"},{"line_number":23,"context_line":"            matchLabels:"}],"source_content_type":"text/x-smarty","patch_set":39,"id":"3f79a3b5_83c60f69","line":20,"in_reply_to":"3f79a3b5_683712e6","updated":"2018-10-10 19:59:02.000000000","message":"Done","commit_id":"ce258769bf858c9af0fae014a94caac542526b71"},{"author":{"_account_id":20466,"name":"Tin Lam","email":"tin@lam.wtf","username":"tinlam"},"change_message_id":"e486ebc1403740ab98640b50f744a6d880439614","unresolved":false,"context_lines":[{"line_number":17,"context_line":"  Creates a network policy manifest for services."},{"line_number":18,"context_line":"values: |"},{"line_number":19,"context_line":"  network_policy:"},{"line_number":20,"context_line":"    ingress:"},{"line_number":21,"context_line":"      - from:"},{"line_number":22,"context_line":"        - podSelector:"},{"line_number":23,"context_line":"            matchLabels:"}],"source_content_type":"text/x-smarty","patch_set":39,"id":"3f79a3b5_c8dbc64b","line":20,"in_reply_to":"3f79a3b5_683712e6","updated":"2018-10-10 19:16:43.000000000","message":"Good catch; will fix.","commit_id":"ce258769bf858c9af0fae014a94caac542526b71"},{"author":{"_account_id":22477,"name":"Matt McEuen","email":"matt.mceuen@att.com","username":"mattmceuen"},"change_message_id":"2f474078fcbb799d18fed8c0bae7bd9269f8fd99","unresolved":false,"context_lines":[{"line_number":25,"context_line":"        ports:"},{"line_number":26,"context_line":"        - protocol: TCP"},{"line_number":27,"context_line":"          port: 80"},{"line_number":28,"context_line":"usage: |"},{"line_number":29,"context_line":"  {{ dict \"envAll\" . \"name\" \"application\" \"label\" \"myLabel\" | include \"helm-toolkit.manifests.kubernetes_network_policy\" }}"},{"line_number":30,"context_line":"return: |"},{"line_number":31,"context_line":"  ---"}],"source_content_type":"text/x-smarty","patch_set":39,"id":"3f79a3b5_6d72c4e6","line":28,"updated":"2018-10-10 19:07:58.000000000","message":"This demonstrates the ingress policy; could we add an example of egress policy in action?","commit_id":"ce258769bf858c9af0fae014a94caac542526b71"},{"author":{"_account_id":28592,"name":"Mike Pham","email":"tp6510@att.com","username":"tp6510"},"change_message_id":"6233d7d511bb33a55c5f0ba370523106fe37034e","unresolved":false,"context_lines":[{"line_number":25,"context_line":"        ports:"},{"line_number":26,"context_line":"        - protocol: TCP"},{"line_number":27,"context_line":"          port: 80"},{"line_number":28,"context_line":"usage: |"},{"line_number":29,"context_line":"  {{ dict \"envAll\" . \"name\" \"application\" \"label\" \"myLabel\" | include \"helm-toolkit.manifests.kubernetes_network_policy\" }}"},{"line_number":30,"context_line":"return: |"},{"line_number":31,"context_line":"  ---"}],"source_content_type":"text/x-smarty","patch_set":39,"id":"3f79a3b5_e39ca371","line":28,"in_reply_to":"3f79a3b5_6d72c4e6","updated":"2018-10-10 19:59:02.000000000","message":"Done","commit_id":"ce258769bf858c9af0fae014a94caac542526b71"},{"author":{"_account_id":20466,"name":"Tin Lam","email":"tin@lam.wtf","username":"tinlam"},"change_message_id":"e486ebc1403740ab98640b50f744a6d880439614","unresolved":false,"context_lines":[{"line_number":25,"context_line":"        ports:"},{"line_number":26,"context_line":"        - protocol: TCP"},{"line_number":27,"context_line":"          port: 80"},{"line_number":28,"context_line":"usage: |"},{"line_number":29,"context_line":"  {{ dict \"envAll\" . \"name\" \"application\" \"label\" \"myLabel\" | include \"helm-toolkit.manifests.kubernetes_network_policy\" }}"},{"line_number":30,"context_line":"return: |"},{"line_number":31,"context_line":"  ---"}],"source_content_type":"text/x-smarty","patch_set":39,"id":"3f79a3b5_08bbfee3","line":28,"in_reply_to":"3f79a3b5_6d72c4e6","updated":"2018-10-10 19:16:43.000000000","message":"Will update the documentation.  Currently, the egress is open to everything.  We will need to tighten this in future patch set and leverage the dependencies in values.yaml.","commit_id":"ce258769bf858c9af0fae014a94caac542526b71"}],"helm-toolkit/templates/utils/_port_utils.tpl":[{"author":{"_account_id":20466,"name":"Tin Lam","email":"tin@lam.wtf","username":"tinlam"},"change_message_id":"e4dc7003300fbd17f60b42e3c88810a272af59c2","unresolved":false,"context_lines":[{"line_number":51,"context_line":"{{- end -}}"},{"line_number":52,"context_line":"{{- end -}}"},{"line_number":53,"context_line":""},{"line_number":54,"context_line":"{{- define \"helm-toolkit.utils.getApplication\" -}}"},{"line_number":55,"context_line":"{{- printf \"%s\" (index (splitList \"-\" (index . 0)) 0) -}}"},{"line_number":56,"context_line":"{{- end -}}"},{"line_number":57,"context_line":""},{"line_number":58,"context_line":"{{- define \"helm-toolkit.utils.getComponent\" -}}"},{"line_number":59,"context_line":"{{- $res :\u003d splitList \"-\" (index . 0) -}}"},{"line_number":60,"context_line":"{{- if gt (len $res) 1 -}}"},{"line_number":61,"context_line":"{{- printf \"%s\" (index $res 1) -}}"},{"line_number":62,"context_line":"{{- end -}}"},{"line_number":63,"context_line":"{{- end -}}"}],"source_content_type":"text/x-smarty","patch_set":5,"id":"3f79a3b5_972c9099","line":63,"range":{"start_line":54,"start_character":0,"end_line":63,"end_character":11},"updated":"2018-08-28 05:27:15.000000000","message":"these can be removed in future patchset.","commit_id":"28825fd850f91b3cec24a8d209234646bfb1852b"}],"lockdown/Chart.yaml":[{"author":{"_account_id":22477,"name":"Matt McEuen","email":"matt.mceuen@att.com","username":"mattmceuen"},"change_message_id":"2f474078fcbb799d18fed8c0bae7bd9269f8fd99","unresolved":false,"context_lines":[{"line_number":15,"context_line":"apiVersion: v1"},{"line_number":16,"context_line":"appVersion: \"1.0\""},{"line_number":17,"context_line":"description: |"},{"line_number":18,"context_line":"  A helm chart used to lockdown all ingress and egress for a namespace"},{"line_number":19,"context_line":"name: lockdown"},{"line_number":20,"context_line":"version: 0.1.0"}],"source_content_type":"text/x-yaml","patch_set":39,"id":"3f79a3b5_88414e0b","line":18,"updated":"2018-10-10 19:07:58.000000000","message":"Is this chart just for testing, or will we be using it production to lay down some kind of default policy?","commit_id":"ce258769bf858c9af0fae014a94caac542526b71"},{"author":{"_account_id":20466,"name":"Tin Lam","email":"tin@lam.wtf","username":"tinlam"},"change_message_id":"e486ebc1403740ab98640b50f744a6d880439614","unresolved":false,"context_lines":[{"line_number":15,"context_line":"apiVersion: v1"},{"line_number":16,"context_line":"appVersion: \"1.0\""},{"line_number":17,"context_line":"description: |"},{"line_number":18,"context_line":"  A helm chart used to lockdown all ingress and egress for a namespace"},{"line_number":19,"context_line":"name: lockdown"},{"line_number":20,"context_line":"version: 0.1.0"}],"source_content_type":"text/x-yaml","patch_set":39,"id":"3f79a3b5_2817daf0","line":18,"in_reply_to":"3f79a3b5_88414e0b","updated":"2018-10-10 19:16:43.000000000","message":"Currently, it is used for testing.  But I presume something like this, and Chris can chime in here, will need to be in production to shut everything down and whitelist traffic to meet security standard.","commit_id":"ce258769bf858c9af0fae014a94caac542526b71"}],"lockdown/templates/network_policy.yaml":[{"author":{"_account_id":8898,"name":"Chris Wedgwood","email":"cw@f00f.org","username":"anticw"},"change_message_id":"d47593b155bde433e71c9202a89b0e533570e02d","unresolved":false,"context_lines":[{"line_number":13,"context_line":"See the License for the specific language governing permissions and"},{"line_number":14,"context_line":"limitations under the License."},{"line_number":15,"context_line":"*/}}"},{"line_number":16,"context_line":"---"},{"line_number":17,"context_line":"apiVersion: networking.k8s.io/v1"},{"line_number":18,"context_line":"kind: NetworkPolicy"},{"line_number":19,"context_line":"metadata:"}],"source_content_type":"text/x-yaml","patch_set":28,"id":"3f79a3b5_21ca5b4e","line":16,"range":{"start_line":16,"start_character":0,"end_line":16,"end_character":3},"updated":"2018-09-19 03:19:57.000000000","message":"?","commit_id":"f09a3295d806b1723082ee3c11c22e999ca8b17e"},{"author":{"_account_id":20466,"name":"Tin Lam","email":"tin@lam.wtf","username":"tinlam"},"change_message_id":"84e4ea288a29ee9d4adf0358a6ac6a4f0b6faee8","unresolved":false,"context_lines":[{"line_number":13,"context_line":"See the License for the specific language governing permissions and"},{"line_number":14,"context_line":"limitations under the License."},{"line_number":15,"context_line":"*/}}"},{"line_number":16,"context_line":"---"},{"line_number":17,"context_line":"apiVersion: networking.k8s.io/v1"},{"line_number":18,"context_line":"kind: NetworkPolicy"},{"line_number":19,"context_line":"metadata:"}],"source_content_type":"text/x-yaml","patch_set":28,"id":"3f79a3b5_21549b53","line":16,"range":{"start_line":16,"start_character":0,"end_line":16,"end_character":3},"in_reply_to":"3f79a3b5_21ca5b4e","updated":"2018-09-19 03:37:09.000000000","message":"Done","commit_id":"f09a3295d806b1723082ee3c11c22e999ca8b17e"},{"author":{"_account_id":22477,"name":"Matt McEuen","email":"matt.mceuen@att.com","username":"mattmceuen"},"change_message_id":"2f474078fcbb799d18fed8c0bae7bd9269f8fd99","unresolved":false,"context_lines":[{"line_number":21,"context_line":"spec:"},{"line_number":22,"context_line":"  policyTypes:"},{"line_number":23,"context_line":"    - Egress"},{"line_number":24,"context_line":"  podSelector: {}"},{"line_number":25,"context_line":"  egress: []"}],"source_content_type":"text/x-yaml","patch_set":39,"id":"3f79a3b5_08d1be56","line":24,"updated":"2018-10-10 19:07:58.000000000","message":"The description for this chart says that it locks down al ingress and egress for a namespace -- this policy looks like it\u0027s only locking down egress, right?  Let me know if I\u0027m missing something.","commit_id":"ce258769bf858c9af0fae014a94caac542526b71"},{"author":{"_account_id":20466,"name":"Tin Lam","email":"tin@lam.wtf","username":"tinlam"},"change_message_id":"e486ebc1403740ab98640b50f744a6d880439614","unresolved":false,"context_lines":[{"line_number":21,"context_line":"spec:"},{"line_number":22,"context_line":"  policyTypes:"},{"line_number":23,"context_line":"    - Egress"},{"line_number":24,"context_line":"  podSelector: {}"},{"line_number":25,"context_line":"  egress: []"}],"source_content_type":"text/x-yaml","patch_set":39,"id":"3f79a3b5_c80d06e8","line":24,"in_reply_to":"3f79a3b5_08d1be56","updated":"2018-10-10 19:16:43.000000000","message":"By default ingress is locked down if not specified, but we should make this more explicit.","commit_id":"ce258769bf858c9af0fae014a94caac542526b71"},{"author":{"_account_id":28592,"name":"Mike Pham","email":"tp6510@att.com","username":"tp6510"},"change_message_id":"6233d7d511bb33a55c5f0ba370523106fe37034e","unresolved":false,"context_lines":[{"line_number":21,"context_line":"spec:"},{"line_number":22,"context_line":"  policyTypes:"},{"line_number":23,"context_line":"    - Egress"},{"line_number":24,"context_line":"  podSelector: {}"},{"line_number":25,"context_line":"  egress: []"}],"source_content_type":"text/x-yaml","patch_set":39,"id":"3f79a3b5_63909350","line":24,"in_reply_to":"3f79a3b5_08d1be56","updated":"2018-10-10 19:59:02.000000000","message":"Done","commit_id":"ce258769bf858c9af0fae014a94caac542526b71"}],"lockdown/values.yaml":[{"author":{"_account_id":8898,"name":"Chris Wedgwood","email":"cw@f00f.org","username":"anticw"},"change_message_id":"d47593b155bde433e71c9202a89b0e533570e02d","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":28,"id":"3f79a3b5_41c75746","side":"PARENT","line":1,"updated":"2018-09-19 03:19:57.000000000","message":"empty file?","commit_id":"accaf8aabfd95cbe832c506ca74954ab7d2fa31c"},{"author":{"_account_id":20466,"name":"Tin Lam","email":"tin@lam.wtf","username":"tinlam"},"change_message_id":"84e4ea288a29ee9d4adf0358a6ac6a4f0b6faee8","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":28,"id":"3f79a3b5_a160ab36","side":"PARENT","line":1,"in_reply_to":"3f79a3b5_41c75746","updated":"2018-09-19 03:37:09.000000000","message":"Place holder in case something goes into this later - was planning to use this to chart to provide pod policy lockdown later.","commit_id":"accaf8aabfd95cbe832c506ca74954ab7d2fa31c"},{"author":{"_account_id":22477,"name":"Matt McEuen","email":"matt.mceuen@att.com","username":"mattmceuen"},"change_message_id":"2f474078fcbb799d18fed8c0bae7bd9269f8fd99","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":39,"id":"3f79a3b5_c8f18602","line":1,"updated":"2018-10-10 19:07:58.000000000","message":"Could we add a copyright header here so it\u0027s not just a zero-byte file?","commit_id":"ce258769bf858c9af0fae014a94caac542526b71"},{"author":{"_account_id":28592,"name":"Mike Pham","email":"tp6510@att.com","username":"tp6510"},"change_message_id":"6233d7d511bb33a55c5f0ba370523106fe37034e","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":39,"id":"3f79a3b5_838b6f20","line":1,"in_reply_to":"3f79a3b5_c8f18602","updated":"2018-10-10 19:59:02.000000000","message":"Done","commit_id":"ce258769bf858c9af0fae014a94caac542526b71"},{"author":{"_account_id":20466,"name":"Tin Lam","email":"tin@lam.wtf","username":"tinlam"},"change_message_id":"e486ebc1403740ab98640b50f744a6d880439614","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":39,"id":"3f79a3b5_28c59a5c","line":1,"in_reply_to":"3f79a3b5_c8f18602","updated":"2018-10-10 19:16:43.000000000","message":"will do","commit_id":"ce258769bf858c9af0fae014a94caac542526b71"}],"mariadb/values.yaml":[{"author":{"_account_id":23928,"name":"Pete Birley","email":"petebirley@gmail.com","username":"portdirect"},"change_message_id":"05f10831de5b65b5245fb786a8820c11faed73aa","unresolved":false,"context_lines":[{"line_number":264,"context_line":"        default: 3306"},{"line_number":265,"context_line":"      wsrep:"},{"line_number":266,"context_line":"        default: 4567"},{"line_number":267,"context_line":"  kube-dns:"},{"line_number":268,"context_line":"    namespace: kube-system"},{"line_number":269,"context_line":"    name: kubernetes-dns"},{"line_number":270,"context_line":"    hosts:"}],"source_content_type":"text/x-yaml","patch_set":32,"id":"3f79a3b5_22369903","line":267,"range":{"start_line":267,"start_character":6,"end_line":267,"end_character":7},"updated":"2018-09-21 16:07:47.000000000","message":"due to limiations in gotpl this would be better as `_`","commit_id":"17c646108972e1ba8b8be727dc5bebc7f3115ae1"},{"author":{"_account_id":28592,"name":"Mike Pham","email":"tp6510@att.com","username":"tp6510"},"change_message_id":"6233d7d511bb33a55c5f0ba370523106fe37034e","unresolved":false,"context_lines":[{"line_number":264,"context_line":"        default: 3306"},{"line_number":265,"context_line":"      wsrep:"},{"line_number":266,"context_line":"        default: 4567"},{"line_number":267,"context_line":"  kube-dns:"},{"line_number":268,"context_line":"    namespace: kube-system"},{"line_number":269,"context_line":"    name: kubernetes-dns"},{"line_number":270,"context_line":"    hosts:"}],"source_content_type":"text/x-yaml","patch_set":32,"id":"3f79a3b5_bdfdea09","line":267,"range":{"start_line":267,"start_character":6,"end_line":267,"end_character":7},"in_reply_to":"3f79a3b5_22369903","updated":"2018-10-10 19:59:02.000000000","message":"Done","commit_id":"17c646108972e1ba8b8be727dc5bebc7f3115ae1"}],"openvswitch/values.yaml":[{"author":{"_account_id":22477,"name":"Matt McEuen","email":"matt.mceuen@att.com","username":"mattmceuen"},"change_message_id":"2f474078fcbb799d18fed8c0bae7bd9269f8fd99","unresolved":false,"context_lines":[{"line_number":49,"context_line":"  #   br0: if0"},{"line_number":50,"context_line":"  #   br1: iface_two"},{"line_number":51,"context_line":"  auto_bridge_add: {}"},{"line_number":52,"context_line":""},{"line_number":53,"context_line":"pod:"},{"line_number":54,"context_line":"  lifecycle:"},{"line_number":55,"context_line":"    upgrades:"}],"source_content_type":"text/x-yaml","patch_set":39,"id":"3f79a3b5_88606ed2","line":52,"updated":"2018-10-10 19:07:58.000000000","message":"We don\u0027t have ingress policy defined in any of the infra charts here; would it be a good idea to add it?  Would anything need to talk to OVS besides Neutron (and maybe Nova)?\n\nFor things like memcached and rabbitmq I don\u0027t have a strong opinion -- \"everything\" talks to those guys, and there\u0027s no ingress rules from outside the cluster, so ingress policy would probably be overkill.","commit_id":"ce258769bf858c9af0fae014a94caac542526b71"},{"author":{"_account_id":28592,"name":"Mike Pham","email":"tp6510@att.com","username":"tp6510"},"change_message_id":"deac7d726323a7ed24bef054c9c9b0d102614958","unresolved":false,"context_lines":[{"line_number":49,"context_line":"  #   br0: if0"},{"line_number":50,"context_line":"  #   br1: iface_two"},{"line_number":51,"context_line":"  auto_bridge_add: {}"},{"line_number":52,"context_line":""},{"line_number":53,"context_line":"pod:"},{"line_number":54,"context_line":"  lifecycle:"},{"line_number":55,"context_line":"    upgrades:"}],"source_content_type":"text/x-yaml","patch_set":39,"id":"3f79a3b5_fec5180a","line":52,"in_reply_to":"3f79a3b5_88606ed2","updated":"2018-10-10 20:44:15.000000000","message":"We can add ingress policy here, but by default the network_policy is disable. It will turn on in the gate by override.","commit_id":"ce258769bf858c9af0fae014a94caac542526b71"}]}