mirror of
https://github.com/2martens/cloud-configuration.git
synced 2026-10-17 16:46:51 +02:00
Added cilium network policy
This commit is contained in:
@@ -13,6 +13,7 @@ specs:
|
||||
- toEndpoints:
|
||||
- matchLabels:
|
||||
k8s:app.kubernetes.io/name: argocd-server
|
||||
k8s:io.kubernetes.pod.namespace: argocd
|
||||
toPorts:
|
||||
- ports:
|
||||
- port: '8080'
|
||||
@@ -20,6 +21,7 @@ specs:
|
||||
- toEndpoints:
|
||||
- matchLabels:
|
||||
k8s:app.kubernetes.io/name: argocd-application-controller
|
||||
k8s:io.kubernetes.pod.namespace: argocd
|
||||
toPorts:
|
||||
- ports:
|
||||
- port: '8082'
|
||||
@@ -27,6 +29,7 @@ specs:
|
||||
- toEndpoints:
|
||||
- matchLabels:
|
||||
k8s:app.kubernetes.io/name: argocd-repo-server
|
||||
k8s:io.kubernetes.pod.namespace: argocd
|
||||
toPorts:
|
||||
- ports:
|
||||
- port: '8084'
|
||||
@@ -61,6 +64,15 @@ specs:
|
||||
- ports:
|
||||
- port: '8083'
|
||||
protocol: TCP
|
||||
egress:
|
||||
- toEndpoints:
|
||||
- matchLabels:
|
||||
io.cilium.k8s.policy.serviceaccount: coredns
|
||||
k8s:io.kubernetes.pod.namespace: kube-system
|
||||
toPorts:
|
||||
- ports:
|
||||
- port: '53'
|
||||
protocol: UDP
|
||||
- endpointSelector:
|
||||
# apply to core dns pods
|
||||
matchLabels:
|
||||
|
||||
Reference in New Issue
Block a user