Skip to content

docs(envoy-gateway): sync networkpolicy options#342

Open
mberlofa wants to merge 1 commit into
mainfrom
docs/envoy-gateway-template-standards-sync
Open

docs(envoy-gateway): sync networkpolicy options#342
mberlofa wants to merge 1 commit into
mainfrom
docs/envoy-gateway-template-standards-sync

Conversation

@mberlofa

@mberlofa mberlofa commented Jul 3, 2026

Copy link
Copy Markdown
Contributor

Summary

  • document security.networkPolicy.extraEgress for the Envoy Gateway chart
  • add envoy-gateway to the playground coverage allowlist required by site sync

Validation

  • make site-sync-check CHART=envoy-gateway
  • npm run lint
  • npm run format:check
  • npm run build
  • make release-check REPO=site
  • make attribution-check REPO=site

Chart PR: helmforgedev/charts#663
Issue: helmforgedev/charts#633

@coderabbitai

coderabbitai Bot commented Jul 3, 2026

Copy link
Copy Markdown

Review Change Stack

📝 Walkthrough

Walkthrough

This PR updates the Envoy Gateway chart documentation to describe a new security.networkPolicy.extraEgress option for adding custom controller egress rules, including an example and configuration reference entry, and adds envoy-gateway to the site-synced playground configs list.

Changes

Envoy Gateway Docs and Playground Sync

Layer / File(s) Summary
Document extraEgress NetworkPolicy option
src/pages/docs/charts/envoy-gateway.mdx
Updates the Controller Policy egress description to mention extraEgress, adds an example YAML snippet showing a namespaceSelector rule for port 4317, and adds a configuration reference table row for security.networkPolicy.extraEgress.
Add envoy-gateway to synced playground configs
src/pages/playground.astro
Adds 'envoy-gateway' to siteSyncPlaygroundConfigs, including it in playgroundCharts.

Estimated code review effort: 1 (Trivial) | ~5 minutes

Related PRs: None identified.

Suggested labels: documentation

Suggested reviewers: None identified.

A rabbit hops through docs and code,
Adding egress rules along the road,
Port 4317 now finds its way,
Envoy joins the playground fray. 🐰✨

🚥 Pre-merge checks | ✅ 5
✅ Passed checks (5 passed)
Check name Status Explanation
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.
Title check ✅ Passed The title is concise and accurately summarizes the main change: syncing Envoy Gateway network policy options.
Description check ✅ Passed The description covers the summary and validation steps, and includes the related issue reference; only the exact template formatting is missing.
✨ Finishing Touches
📝 Generate docstrings
  • Create stacked PR
  • Commit on current branch
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch docs/envoy-gateway-template-standards-sync

Comment @coderabbitai help to get the list of available commands.

mberlofa added a commit to helmforgedev/charts that referenced this pull request Jul 6, 2026
## Summary
- fix certgen Job pod labels to use selector labels plus component only
- add `security.networkPolicy.extraEgress` support with schema and unit
coverage
- add centralized `envoy-gateway.validate` entrypoint for rate limiting,
external Redis auth, ExternalSecrets, and reserved pod-label validations

## Validation
- helm unittest charts/envoy-gateway
- helm lint --strict charts/envoy-gateway
- make template-standards-check CHART=envoy-gateway
- make standards-check CHART=envoy-gateway
- make validate-chart CHART=envoy-gateway TIMEOUT=900: FULLY VALIDATED
(20 layers)
- make site-sync-check CHART=envoy-gateway
- make release-check REPO=charts
- make attribution-check REPO=charts

Site PR: helmforgedev/site#342
Issue: #633

<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->
## Summary by CodeRabbit

* **New Features**
* Added `security.networkPolicy.extraEgress` to append additional egress
rules to the controller NetworkPolicy.
* Added fail-fast Helm chart validations for incompatible rate-limiting
and external Redis/external secrets settings.
* **Bug Fixes**
* Updated certgen Job pod label behavior to use the chart’s selector
labels.
  * Prevented `podLabels` from overriding reserved selector label keys.
* **Tests**
* Expanded validation, certgen label, and security extra egress test
coverage.
* **Documentation**
  * Corrected wording for `security.networkPolicies` in the README.
<!-- end of auto-generated comment: release notes by coderabbit.ai -->

---------

Co-authored-by: MergeCheck <mergecheck@example.invalid>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant