add option to disallow moodle egress, so testing for RZ is easier

charts/dbp-moodle/templates/networkpolicies/disallow-all-moodle-egress.yaml

@@ -0,0 +1,16 @@
+{{ if .Values.dbpMoodle.allowInternalNetworkingOnly }}
+apiVersion: networking.k8s.io/v1
+kind: NetworkPolicy
+metadata:
+  name: moodle-allow-internal-only
+  namespace: "{{ .Release.Namespace }}"
+spec:
+  podSelector:
+    matchLabels:
+      app.kubernetes.io/name: moodle
+  policyTypes:
+    - Egress
+  egress:
+    - to:
+      - namespaceSelector: {}
+{{ end }}

charts/dbp-moodle/values.yaml

@@ -75,6 +75,9 @@ dbpMoodle:
   update_migration:
     enabled: false
 
+  # -- disallows all egress from the namespace for the moodle deployment
+  allowInternalNetworkingOnly: false
+
   # -- Configurations for the optional redis
   redis:
     host: "moodle-redis-master"