Added cilium network policy

This commit is contained in:
2023-11-17 09:59:09 +01:00
parent c3219be93c
commit f36017617f
2 changed files with 15 additions and 3 deletions
+12
View File
@@ -13,6 +13,7 @@ specs:
- toEndpoints:
- matchLabels:
k8s:app.kubernetes.io/name: argocd-server
k8s:io.kubernetes.pod.namespace: argocd
toPorts:
- ports:
- port: '8080'
@@ -20,6 +21,7 @@ specs:
- toEndpoints:
- matchLabels:
k8s:app.kubernetes.io/name: argocd-application-controller
k8s:io.kubernetes.pod.namespace: argocd
toPorts:
- ports:
- port: '8082'
@@ -27,6 +29,7 @@ specs:
- toEndpoints:
- matchLabels:
k8s:app.kubernetes.io/name: argocd-repo-server
k8s:io.kubernetes.pod.namespace: argocd
toPorts:
- ports:
- port: '8084'
@@ -61,6 +64,15 @@ specs:
- ports:
- port: '8083'
protocol: TCP
egress:
- toEndpoints:
- matchLabels:
io.cilium.k8s.policy.serviceaccount: coredns
k8s:io.kubernetes.pod.namespace: kube-system
toPorts:
- ports:
- port: '53'
protocol: UDP
- endpointSelector:
# apply to core dns pods
matchLabels: