diff --git a/helm/cluster_setup/templates/cilium/hubble-relay-networkpolicy.yaml b/helm/cluster_setup/templates/cilium/hubble-relay-networkpolicy.yaml index f941285..1acf957 100644 --- a/helm/cluster_setup/templates/cilium/hubble-relay-networkpolicy.yaml +++ b/helm/cluster_setup/templates/cilium/hubble-relay-networkpolicy.yaml @@ -30,40 +30,8 @@ specs: - world toPorts: - ports: + - port: '53' + protocol: UDP - port: '443' protocol: TCP ---- -apiVersion: networking.k8s.io/v1 -kind: NetworkPolicy -metadata: - name: hubble-relay - namespace: kube-system -spec: - podSelector: - matchLabels: - k8s-app: hubble-relay - policyTypes: - - Ingress - - Egress - ingress: - - from: - - podSelector: - matchLabels: - k8s-app: hubble-ui - ports: - - port: '80' - protocol: TCP - - port: '4245' - protocol: TCP - egress: - - to: - - namespaceSelector: - matchLabels: - kubernetes.io/metadata.name: kube-system - - podSelector: - matchLabels: - k8s-app: kube-dns - ports: - - port: '53' - protocol: UDP {{- end }} \ No newline at end of file diff --git a/helm/cluster_setup/templates/cilium/hubble-ui-networkpolicy.yaml b/helm/cluster_setup/templates/cilium/hubble-ui-networkpolicy.yaml index 8ddd224..00174d3 100644 --- a/helm/cluster_setup/templates/cilium/hubble-ui-networkpolicy.yaml +++ b/helm/cluster_setup/templates/cilium/hubble-ui-networkpolicy.yaml @@ -16,8 +16,6 @@ specs: io.cilium.k8s.policy.serviceaccount: hubble-ui toPorts: - ports: - - port: '80' - protocol: TCP - port: '4245' protocol: TCP - endpointSelector: @@ -37,40 +35,10 @@ specs: - world toPorts: - ports: + - port: '53' + protocol: UDP + - port: '80' + protocol: TCP - port: '443' protocol: TCP ---- -apiVersion: networking.k8s.io/v1 -kind: NetworkPolicy -metadata: - name: hubble-ui - namespace: kube-system -spec: - podSelector: - matchLabels: - k8s-app: hubble-ui - policyTypes: - - Egress - egress: - - to: - - podSelector: - matchLabels: - k8s-app: hubble-relay - ports: - - port: '80' - protocol: TCP - - port: '4245' - protocol: TCP - - to: - - namespaceSelector: - matchLabels: - kubernetes.io/metadata.name: kube-system - - podSelector: - matchLabels: - k8s-app: kube-dns - ports: - - port: '53' - protocol: UDP ---- - {{- end }} \ No newline at end of file