From be70f4da09f91624f17b16282d926d732cf291d9 Mon Sep 17 00:00:00 2001 From: marcos-silva-rodrigues Date: Thu, 4 Sep 2025 10:02:20 -0300 Subject: [PATCH 1/3] FIX: disabled network policies --- deploy/helmfiles/prd.yaml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/deploy/helmfiles/prd.yaml b/deploy/helmfiles/prd.yaml index 47a86f4..1f91354 100644 --- a/deploy/helmfiles/prd.yaml +++ b/deploy/helmfiles/prd.yaml @@ -1,4 +1,4 @@ -charts: +releases: - name: maestro chart: ../helm-chart values: @@ -49,5 +49,5 @@ charts: value: dea2c27f-0973-4588-a2e0-9e31b64c7ffd - name: replicaCount value: 1 - - name: maestro.restricted_ip - value: "177.52.172.0/24,189.84.160.157/32,186.237.171.146/32,10.70.1.0/24" + # - name: maestro.restricted_ip + # value: "177.52.172.0/24,189.84.160.157/32,186.237.171.146/32,10.70.1.0/24" From cb8798d8713907a9b961cb17b167b8b34c14f9db Mon Sep 17 00:00:00 2001 From: marcos-silva-rodrigues Date: Fri, 5 Sep 2025 10:21:11 -0300 Subject: [PATCH 2/3] FIX: enable restricted ips --- deploy/helmfiles/stg.yaml | 55 +++++++++++++++------------------------ 1 file changed, 21 insertions(+), 34 deletions(-) diff --git a/deploy/helmfiles/stg.yaml b/deploy/helmfiles/stg.yaml index 362d061..693e7b1 100644 --- a/deploy/helmfiles/stg.yaml +++ b/deploy/helmfiles/stg.yaml @@ -7,37 +7,24 @@ charts: # Environment to test Network Policies - # - name: private-maestro - # chart: ../helm-chart - # values: - # - ../helm-chart/values.yaml - # set: - # - name: app_name - # value: maestro-private - # - name: maestro.env - # value: stg - # - name: maestro.duc_url - # value: duc.stg.dadosfera.ai - # - name: hostname - # value: private-maestro.stg.dadosfera.ai - # - name: maestro.pi_factory_url - # value: pi-factory.dadosfera.ai - # - name: maestro.in_factory_url - # value: in-factory.stg.dadosfera.ai - # - name: maestro.tr_factory_url - # value: in-factory.dadosfera.ai - # - name: maestro.open_customer_id - # value: b3e3dfe5-b992-4586-a73c-c0b0c00f615d - # - name: maestro.open_group_id - # value: e3f98a2f-7748-4981-8505-7695c8ca8218 - # # Customer id - # - name: maestro.dedicated_proxy - # value: 14d52fd4-d83d-4cdd-be34-bf11cc28b3bd - # - name: replicaCount - # value: 1 - # - name: affinity - # value: null - # - name: resources - # value: null - # - name: maestro.restricted_ip - # value: "57.151.113.140/30" + - name: private-maestro + chart: ../helm-chart + values: + - ../helm-chart/values.yaml + - ../helm-chart/values-stg.yaml + set: + - name: app_name + value: maestro-private + - name: hostname + value: private-maestro.stg.dadosfera.ai + # Customer id + - name: maestro.dedicated_proxy + value: 14d52fd4-d83d-4cdd-be34-bf11cc28b3bd + - name: replicaCount + value: 1 + - name: affinity + value: null + - name: resources + value: null + - name: maestro.restricted_ip + value: "137.131.167.254/32,10.70.0.0/16,163.176.242.27/32" From 00163ad8949a13e8b5d4909ae028a5b9d4c18c74 Mon Sep 17 00:00:00 2001 From: marcos-silva-rodrigues Date: Tue, 9 Sep 2025 11:17:45 -0300 Subject: [PATCH 3/3] UPDATE: network policies --- deploy/helmfiles/prd.yaml | 7 +++++-- deploy/helmfiles/stg.yaml | 2 +- 2 files changed, 6 insertions(+), 3 deletions(-) diff --git a/deploy/helmfiles/prd.yaml b/deploy/helmfiles/prd.yaml index 1f91354..c15d72c 100644 --- a/deploy/helmfiles/prd.yaml +++ b/deploy/helmfiles/prd.yaml @@ -49,5 +49,8 @@ releases: value: dea2c27f-0973-4588-a2e0-9e31b64c7ffd - name: replicaCount value: 1 - # - name: maestro.restricted_ip - # value: "177.52.172.0/24,189.84.160.157/32,186.237.171.146/32,10.70.1.0/24" + # 10.70.0.0/16 internal network + # 137.131.167.254/32 loadbalancer + # 159.112.184.81/32 cluster ip for the uptime request ingest + - name: maestro.restricted_ip + value: "177.52.172.0/24, 189.84.160.157/32, 186.237.171.146/32, 137.131.167.254/32, 10.70.0.0/16, 159.112.184.81/32" diff --git a/deploy/helmfiles/stg.yaml b/deploy/helmfiles/stg.yaml index 693e7b1..906b450 100644 --- a/deploy/helmfiles/stg.yaml +++ b/deploy/helmfiles/stg.yaml @@ -27,4 +27,4 @@ charts: - name: resources value: null - name: maestro.restricted_ip - value: "137.131.167.254/32,10.70.0.0/16,163.176.242.27/32" + value: "137.131.167.254/32, 10.70.0.0/16, 159.112.184.81/32"