No NetworkPolicies in Helm chart

[raballew]

Description

The operator contains no NetworkPolicies. All pods can communicate with all other pods without restriction. Controller (8082), router (8083), and exporter ports have no ingress restrictions.

Suggested Fix

• Add default-deny ingress NetworkPolicy templates
• Create explicit allowlists for controller, router, and exporter ports
• Add egress restrictions for router (needs no outbound)

[mangelajo]

Helm charts are deprecated, but this also applies to the operator, so let's just rename it.

[mangelajo]

By the way, not sure how feasible this is. Any client anywhere needs to connect to the controller, any client anywhere needs to connect to the router.

This is may be more important when we start talking about metric exposure, or any other ports.

[raballew]

helm is deprecated