Aleksei SviridkinandClaude d2051f1dfe feat(values): add networkPolicy configuration section ...

Add networkPolicy section to values.yaml with comprehensive configuration options:
- enabled: boolean flag to enable/disable NetworkPolicy (default: false)
- policyTypes: configure Ingress and/or Egress policies
- ingress: control which pods/namespaces can access Jellyfin
  - allowExternal: permit access from any namespace (default: true)
  - podSelector/namespaceSelector: restrict access to specific pods/namespaces
  - customRules: advanced ingress rules for complex scenarios
- egress: control outbound connections from Jellyfin
  - allowDNS: permit DNS resolution (default: true, required)
  - allowAllEgress: permit all internet access (default: true)
  - restrictedEgress: high-security mode with HTTPS-only metadata access
  - customRules: advanced egress rules
- metrics: automatic Prometheus integration configuration

All parameters include detailed documentation explaining:
- Purpose and usage
- Default values and recommended settings
- Examples for common scenarios
- Security implications

The configuration supports use cases from simple deployments to
zero-trust environments while maintaining sensible defaults.

Co-Authored-By: Claude <noreply@anthropic.com>
Signed-off-by: Aleksei Sviridkin <f@lex.la>

d2051f1dfe · 2025-11-07 19:27:55 +03:00

History

..

jellyfin

feat(values): add networkPolicy configuration section

2025-11-07 19:27:55 +03:00