2martens/cloud-configuration
1
0
Fork 0
mirror of https://github.com/2martens/cloud-configuration.git synced 2026-10-17 16:46:51 +02:00
Code Issues Activity

Allow egress to host for argocd

Browse Source
This commit is contained in:
2martens
2023-11-17 15:07:33 +01:00
parent f36017617f
commit 775ca487bf
2 changed files with 22 additions and 16 deletions
Download Patch File Download Diff File Expand all files Collapse all files
helm/argocd/Chart.yaml
+2 -2
View File
@@ -1,6 +1,6 @@
apiVersion: v2
name: argocd-configuration
version: 0.2.1
version: 0.2.2
type: application
description: "ArgoCD configuration which requires Argo CD to be installed separately."
maintainers:
@@ -9,7 +9,7 @@ maintainers:
annotations:
artifacthub.io/changes: |
- kind: fixed
description: Added missing namespace labels
description: Allow egress to host
artifacthub.io/signKey: |
fingerprint: F0F153B65BAD467201D7544E47393ABD1F96B7C8
url: https://mafiasi.de/pks/key/47393ABD1F96B7C8.asc
helm/argocd/templates/network-policy.yaml
+20 -14
View File
@@ -12,24 +12,24 @@ specs:
# kubelet -> probes
- toEndpoints:
- matchLabels:
k8s:app.kubernetes.io/name: argocd-server
k8s:io.kubernetes.pod.namespace: argocd
app.kubernetes.io/name: argocd-server
io.kubernetes.pod.namespace: argocd
toPorts:
- ports:
- port: '8080'
protocol: TCP
- toEndpoints:
- matchLabels:
k8s:app.kubernetes.io/name: argocd-application-controller
k8s:io.kubernetes.pod.namespace: argocd
app.kubernetes.io/name: argocd-application-controller
io.kubernetes.pod.namespace: argocd
toPorts:
- ports:
- port: '8082'
protocol: TCP
- toEndpoints:
- matchLabels:
k8s:app.kubernetes.io/name: argocd-repo-server
k8s:io.kubernetes.pod.namespace: argocd
app.kubernetes.io/name: argocd-repo-server
io.kubernetes.pod.namespace: argocd
toPorts:
- ports:
- port: '8084'
@@ -37,7 +37,7 @@ specs:
- endpointSelector:
# apply to core dns pods
matchLabels:
k8s:app.kubernetes.io/name: argocd-server
app.kubernetes.io/name: argocd-server
ingress:
# kubelet -> probes
- fromEntities:
@@ -49,8 +49,8 @@ specs:
# ingress -> server
- fromEndpoints:
- matchLabels:
k8s:io.cilium.k8s.policy.serviceaccount: nginx-ingress-microk8s-serviceaccount
k8s:io.kubernetes.pod.namespace: ingress
io.cilium.k8s.policy.serviceaccount: nginx-ingress-microk8s-serviceaccount
io.kubernetes.pod.namespace: ingress
toPorts:
- ports:
- port: '8080'
@@ -58,8 +58,8 @@ specs:
# prometheus -> server metrics
- fromEndpoints:
- matchLabels:
k8s:io.cilium.k8s.policy.serviceaccount: prometheus-kube-prometheus-prometheus
k8s:io.kubernetes.pod.namespace: observability
io.cilium.k8s.policy.serviceaccount: prometheus-kube-prometheus-prometheus
io.kubernetes.pod.namespace: observability
toPorts:
- ports:
- port: '8083'
@@ -68,15 +68,21 @@ specs:
- toEndpoints:
- matchLabels:
io.cilium.k8s.policy.serviceaccount: coredns
k8s:io.kubernetes.pod.namespace: kube-system
io.kubernetes.pod.namespace: kube-system
toPorts:
- ports:
- port: '53'
protocol: UDP
- toEntities:
- host
toPorts:
- ports:
- port: '16443'
protocol: TCP
- endpointSelector:
# apply to core dns pods
matchLabels:
k8s:app.kubernetes.io/name: argocd-application-controller
app.kubernetes.io/name: argocd-application-controller
ingress:
# kubelet -> probes
- fromEntities:
@@ -88,7 +94,7 @@ specs:
- endpointSelector:
# apply to core dns pods
matchLabels:
k8s:app.kubernetes.io/name: argocd-repo-server
app.kubernetes.io/name: argocd-repo-server
ingress:
# kubelet -> probes
- fromEntities: