openshift/project: simplify egresspolicy - different env db won't allow access anyway

Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
2026-07-17 12:10:34 +08:00 · 2019-05-09 13:41:55 +02:00
parent 63451e80a1
commit 72ac044a5e
1 changed files with 5 additions and 4 deletions
--- a/roles/openshift/project/templates/egresspolicy.yml
+++ b/roles/openshift/project/templates/egresspolicy.yml
@@ -6,14 +6,15 @@ metadata:
 spec:
  egress:
 {% if not allow_fas_db or env != "production" %}
+{% if env == "staging" %}
+  - type: Deny
+    to:
+      cidrSelector: "10.5.128.96/32"
+{% else %}
  - type: Deny
    to:
      cidrSelector: "10.5.126.99/32"
 {% endif %}
-{% if not allow_fas_db or env != "staging" %}
-  - type: Deny
-    to:
-      cidrSelector: "10.5.128.96/32"
 {% endif %}
  - type: Allow
    to: