2martens/cloud-configuration
1
0
Fork 0
mirror of https://github.com/2martens/cloud-configuration.git synced 2026-10-17 16:46:51 +02:00
Code Issues Activity

Added cilium network policy

Browse Source
This commit is contained in:
2martens
2023-11-17 09:59:09 +01:00
parent c3219be93c
commit f36017617f
2 changed files with 15 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
helm/argocd/Chart.yaml
+3 -3
View File
@@ -1,6 +1,6 @@
apiVersion: v2 apiVersion: v2
name: argocd-configuration name: argocd-configuration
version: 0.2.0 version: 0.2.1
type: application type: application
description: "ArgoCD configuration which requires Argo CD to be installed separately." description: "ArgoCD configuration which requires Argo CD to be installed separately."
maintainers: maintainers:
@@ -8,8 +8,8 @@ maintainers:
url: https://2martens.de url: https://2martens.de
annotations: annotations:
artifacthub.io/changes: | artifacthub.io/changes: |
- kind: added - kind: fixed
description: Added cilium network policy description: Added missing namespace labels
artifacthub.io/signKey: | artifacthub.io/signKey: |
fingerprint: F0F153B65BAD467201D7544E47393ABD1F96B7C8 fingerprint: F0F153B65BAD467201D7544E47393ABD1F96B7C8
url: https://mafiasi.de/pks/key/47393ABD1F96B7C8.asc url: https://mafiasi.de/pks/key/47393ABD1F96B7C8.asc
helm/argocd/templates/network-policy.yaml
+12
View File
@@ -13,6 +13,7 @@ specs:
- toEndpoints: - toEndpoints:
- matchLabels: - matchLabels:
k8s:app.kubernetes.io/name: argocd-server k8s:app.kubernetes.io/name: argocd-server
k8s:io.kubernetes.pod.namespace: argocd
toPorts: toPorts:
- ports: - ports:
- port: '8080' - port: '8080'
@@ -20,6 +21,7 @@ specs:
- toEndpoints: - toEndpoints:
- matchLabels: - matchLabels:
k8s:app.kubernetes.io/name: argocd-application-controller k8s:app.kubernetes.io/name: argocd-application-controller
k8s:io.kubernetes.pod.namespace: argocd
toPorts: toPorts:
- ports: - ports:
- port: '8082' - port: '8082'
@@ -27,6 +29,7 @@ specs:
- toEndpoints: - toEndpoints:
- matchLabels: - matchLabels:
k8s:app.kubernetes.io/name: argocd-repo-server k8s:app.kubernetes.io/name: argocd-repo-server
k8s:io.kubernetes.pod.namespace: argocd
toPorts: toPorts:
- ports: - ports:
- port: '8084' - port: '8084'
@@ -61,6 +64,15 @@ specs:
- ports: - ports:
- port: '8083' - port: '8083'
protocol: TCP protocol: TCP
egress:
- toEndpoints:
- matchLabels:
io.cilium.k8s.policy.serviceaccount: coredns
k8s:io.kubernetes.pod.namespace: kube-system
toPorts:
- ports:
- port: '53'
protocol: UDP
- endpointSelector: - endpointSelector:
# apply to core dns pods # apply to core dns pods
matchLabels: matchLabels: