ADR-006: Tailored NetworkPolicies for RHDH deployments [RHDHPLAN-1032] - #8

Merged

rm3l merged 41 commits into

redhat-developer:mainfrom

rm3l:RHDHPLAN-1032--add-tailored-networkpolicies-to-the-install-methods-operands-and-helm-chart

Aug 3, 2026

Commits on Jun 1, 2026

ADR: Tailored NetworkPolicies for RHDH Install Methods
rm3l
committed
048ad85
add minor changes
rm3l
authored
c6504fa
Clarify boundary between base and user-managed policies
rm3l
committed
c1b7ff6
Replace em dashes with clear punctuation, fix broken link, add OCPSTRAT-819 reference
rm3l
committed
52429fe
minor style update
rm3l
authored
2e426f7
Rename Implementation approach to Key design principles
rm3l
committed
2b9e946
update
rm3l
authored
9025e54
Clarify effect on existing deployments when upgrading

rm3l
and
subhashkhileri
committed
7c16b8d
clarify the effect on sidecar containers like Lighstpeed

rm3l
and
subhashkhileri
committed
8b001d4
Include known plugin registries in base egress, add policy templates to docs

rm3l
and
polasudo
committed
734221b
Clarify ingress and egress risks, add ingress-only alternative, mention proxy egress

rm3l
and
subhashkhileri
committed
194fb85

Commits on Jun 2, 2026

Add OCP 5+ NetworkPolicy requirement to problem statement
rm3l
committed
99ce818

Commits on Jun 8, 2026

Add ANP/BANP as alternative considered, explain why standard NetworkPolicies fit

rm3l
and
Fortune-Ndlovu
committed
0a116f3
Clarify that policies cover all RHDH-managed pods, not just the backend

rm3l
and
Fortune-Ndlovu
committed
4fcaeba
Acknowledge HTTPS egress trade-off, clarify per-component policy granularity

rm3l
and
Fortune-Ndlovu
committed
e9e30ee
Remove disable toggle, base NetworkPolicies are always present
rm3l
committed
cc346d6
Call out existing Orchestrator podSelector: {} as breaking change
rm3l
committed
ecf4f86
Add concrete upgrade mitigation strategies to negative consequence

rm3l
and
Fortune-Ndlovu
committed
21ac184
Add positive consequences for OCP 5+ alignment, no CRD changes, and per-component granularity
rm3l
committed
ce56b70

Commits on Jun 18, 2026

Merge branch 'main' into RHDHPLAN-1032--add-tailored-networkpolicies-to-the-install-methods-operands-and-helm-chart
rm3l
authored
e82f042
Clarify ANP/BANP rejection for Helm and Operator paths separately

committed
836730b
Add context about RHDH's plugin-driven unpredictable egress patterns

rm3l
and
gazarenkov
committed
6152111
Simplify disconnected environments section to focus on CIDR difference

rm3l
and
gazarenkov
committed
6c4bf37
fixup! Clarify ANP/BANP rejection for Helm and Operator paths separately
rm3l
committed
210f513
Adopt three-part policy taxonomy and update ANP/BANP alternative

rm3l
and
gazarenkov
committed
51d7834
Fix accuracy issues across the ADR
rm3l
committed
598cd57
Simplify context section and fix accuracy across the ADR
rm3l
committed
bc69c6c

Commits on Jun 25, 2026

Commits on Jul 3, 2026

Add metrics port 9464 ingress restriction per security recommendation
rm3l
committed
4ce76c8

Commits on Jul 13, 2026

Commits on Aug 3, 2026

Merge branch 'main' into RHDHPLAN-1032--add-tailored-networkpolicies-to-the-install-methods-operands-and-helm-chart
rm3l
authored
5087562