2martens/cloud-configuration
1
0
Fork 0
mirror of https://github.com/2martens/cloud-configuration.git synced 2026-10-17 16:46:51 +02:00
Code Issues Activity

Allow egress to host for argocd

Browse Source
This commit is contained in:
2martens
2023-11-17 15:07:33 +01:00
parent f36017617f
commit 775ca487bf
2 changed files with 22 additions and 16 deletions
Download Patch File Download Diff File Expand all files Collapse all files
helm/argocd/Chart.yaml
+2 -2
View File
@@ -1,6 +1,6 @@
apiVersion: v2 apiVersion: v2
name: argocd-configuration name: argocd-configuration
version: 0.2.1 version: 0.2.2
type: application type: application
description: "ArgoCD configuration which requires Argo CD to be installed separately." description: "ArgoCD configuration which requires Argo CD to be installed separately."
maintainers: maintainers:
@@ -9,7 +9,7 @@ maintainers:
annotations: annotations:
artifacthub.io/changes: | artifacthub.io/changes: |
- kind: fixed - kind: fixed
description: Added missing namespace labels description: Allow egress to host
artifacthub.io/signKey: | artifacthub.io/signKey: |
fingerprint: F0F153B65BAD467201D7544E47393ABD1F96B7C8 fingerprint: F0F153B65BAD467201D7544E47393ABD1F96B7C8
url: https://mafiasi.de/pks/key/47393ABD1F96B7C8.asc url: https://mafiasi.de/pks/key/47393ABD1F96B7C8.asc
helm/argocd/templates/network-policy.yaml
+20 -14
View File
@@ -12,24 +12,24 @@ specs:
# kubelet -> probes # kubelet -> probes
- toEndpoints: - toEndpoints:
- matchLabels: - matchLabels:
k8s:app.kubernetes.io/name: argocd-server app.kubernetes.io/name: argocd-server
k8s:io.kubernetes.pod.namespace: argocd io.kubernetes.pod.namespace: argocd
toPorts: toPorts:
- ports: - ports:
- port: '8080' - port: '8080'
protocol: TCP protocol: TCP
- toEndpoints: - toEndpoints:
- matchLabels: - matchLabels:
k8s:app.kubernetes.io/name: argocd-application-controller app.kubernetes.io/name: argocd-application-controller
k8s:io.kubernetes.pod.namespace: argocd io.kubernetes.pod.namespace: argocd
toPorts: toPorts:
- ports: - ports:
- port: '8082' - port: '8082'
protocol: TCP protocol: TCP
- toEndpoints: - toEndpoints:
- matchLabels: - matchLabels:
k8s:app.kubernetes.io/name: argocd-repo-server app.kubernetes.io/name: argocd-repo-server
k8s:io.kubernetes.pod.namespace: argocd io.kubernetes.pod.namespace: argocd
toPorts: toPorts:
- ports: - ports:
- port: '8084' - port: '8084'
@@ -37,7 +37,7 @@ specs:
- endpointSelector: - endpointSelector:
# apply to core dns pods # apply to core dns pods
matchLabels: matchLabels:
k8s:app.kubernetes.io/name: argocd-server app.kubernetes.io/name: argocd-server
ingress: ingress:
# kubelet -> probes # kubelet -> probes
- fromEntities: - fromEntities:
@@ -49,8 +49,8 @@ specs:
# ingress -> server # ingress -> server
- fromEndpoints: - fromEndpoints:
- matchLabels: - matchLabels:
k8s:io.cilium.k8s.policy.serviceaccount: nginx-ingress-microk8s-serviceaccount io.cilium.k8s.policy.serviceaccount: nginx-ingress-microk8s-serviceaccount
k8s:io.kubernetes.pod.namespace: ingress io.kubernetes.pod.namespace: ingress
toPorts: toPorts:
- ports: - ports:
- port: '8080' - port: '8080'
@@ -58,8 +58,8 @@ specs:
# prometheus -> server metrics # prometheus -> server metrics
- fromEndpoints: - fromEndpoints:
- matchLabels: - matchLabels:
k8s:io.cilium.k8s.policy.serviceaccount: prometheus-kube-prometheus-prometheus io.cilium.k8s.policy.serviceaccount: prometheus-kube-prometheus-prometheus
k8s:io.kubernetes.pod.namespace: observability io.kubernetes.pod.namespace: observability
toPorts: toPorts:
- ports: - ports:
- port: '8083' - port: '8083'
@@ -68,15 +68,21 @@ specs:
- toEndpoints: - toEndpoints:
- matchLabels: - matchLabels:
io.cilium.k8s.policy.serviceaccount: coredns io.cilium.k8s.policy.serviceaccount: coredns
k8s:io.kubernetes.pod.namespace: kube-system io.kubernetes.pod.namespace: kube-system
toPorts: toPorts:
- ports: - ports:
- port: '53' - port: '53'
protocol: UDP protocol: UDP
- toEntities:
- host
toPorts:
- ports:
- port: '16443'
protocol: TCP
- endpointSelector: - endpointSelector:
# apply to core dns pods # apply to core dns pods
matchLabels: matchLabels:
k8s:app.kubernetes.io/name: argocd-application-controller app.kubernetes.io/name: argocd-application-controller
ingress: ingress:
# kubelet -> probes # kubelet -> probes
- fromEntities: - fromEntities:
@@ -88,7 +94,7 @@ specs:
- endpointSelector: - endpointSelector:
# apply to core dns pods # apply to core dns pods
matchLabels: matchLabels:
k8s:app.kubernetes.io/name: argocd-repo-server app.kubernetes.io/name: argocd-repo-server
ingress: ingress:
# kubelet -> probes # kubelet -> probes
- fromEntities: - fromEntities: