fix: remove old ccnp:s and cnp:s

2025-06-20 14:27:06 +02:00
parent dab590aeb8
commit 26479e157d
11 changed files with 40 additions and 136 deletions
@@ -1,15 +0,0 @@
-apiVersion: cilium.io/v2
-kind: CiliumNetworkPolicy
-metadata:
-  name: allow-kube-api
-  namespace: atlantis
-spec:
-  endpointSelector:
-    matchLabels: {}
-  egress:
-  - toEntities:
-    - kube-apiserver
-    toPorts:
-    - ports:
-      - port: "6443"
-        protocol: TCP
@@ -1,25 +0,0 @@
-apiVersion: cilium.io/v2
-kind: CiliumClusterwideNetworkPolicy
-metadata:
-  name: allow-atlantis-services
-  namespace: {{ .Release.Namespace }}
-spec:
-  egress:
-  - toEndpoints:
-    - matchLabels:
-        k8s:io.kubernetes.pod.namespace: dapr-system
-  - toEndpoints:
-    - matchLabels:
-        k8s:io.kubernetes.pod.namespace: rabbitmq
-  - toEndpoints:
-    - matchLabels:
-        k8s:io.kubernetes.pod.namespace: otel
-  - toFQDNs:
-    - matchName: dapr.github.io
-    - matchName: analytics.loft.rocks
-    - matchPattern: '*.oceanbox.io'
-    # - matchName: gitlab.com
-    # - matchName: api.github.com
-    # - matchPattern: '*.gitlab.com'
-  endpointSelector:
-    matchLabels: {}
@@ -1,15 +0,0 @@
-apiVersion: cilium.io/v2
-kind: CiliumNetworkPolicy
-metadata:
-  name: allow-kube-api
-  namespace: idp
-spec:
-  endpointSelector:
-    matchLabels: {}
-  egress:
-  - toEntities:
-    - kube-apiserver
-    toPorts:
-    - ports:
-      - port: "6443"
-        protocol: TCP
@@ -1,13 +0,0 @@
-apiVersion: cilium.io/v2
-kind: CiliumNetworkPolicy
-metadata:
-  name: allow-grafana-oidc-login
-  namespace: idp
-spec:
-  endpointSelector:
-    matchLabels:
-      app.kubernetes.io/name: cerbos
-  egress:
-  - toFQDNs:
-    - matchName: gitlab.com
-    - matchPattern: '*.gitlab.com'
@@ -1,12 +0,0 @@
-apiVersion: cilium.io/v2
-kind: CiliumNetworkPolicy
-metadata:
-  name: allow-external-idp
-spec:
-  egress:
-  - toFQDNs:
-    - matchName: login.microsoftonline.com
-    - matchName: graph.microsoft.com
-    - matchName: telemetry.cerbos.dev
-  endpointSelector: {}
-
@@ -1,12 +0,0 @@
-apiVersion: cilium.io/v2
-kind: CiliumNetworkPolicy
-metadata:
-  name: allow-itp-smtp
-  namespace: idp
-spec:
-  endpointSelector:
-    matchLabels:
-      app.kubernetes.io/name: keycloak
-  egress:
-  - toFQDNs:
-    - matchName: smtpgw.itpartner.no
@@ -1,12 +0,0 @@
-apiVersion: cilium.io/v2
-kind: CiliumNetworkPolicy
-metadata:
-  name: allow-keycloak
-  namespace: idp
-spec:
-  endpointSelector:
-    matchLabels:
-      app.kubernetes.io/name: dex
-  egress:
-  - toFQDNs:
-    - matchName: auth.srv.oceanbox.io
@@ -1,15 +0,0 @@
-apiVersion: cilium.io/v2
-kind: CiliumNetworkPolicy
-metadata:
-  name: allow-kube-api
-  namespace: jaeger
-spec:
-  endpointSelector:
-    matchLabels: {}
-  egress:
-  - toEntities:
-    - kube-apiserver
-    toPorts:
-    - ports:
-      - port: "6443"
-        protocol: TCP
@@ -1,17 +0,0 @@
-apiVersion: cilium.io/v2
-kind: CiliumNetworkPolicy
-metadata:
-  name: allow-remote-node-webhooks
-  namespace: jaeger
-spec:
-  endpointSelector:
-    matchLabels: {}
-  ingress:
-  - fromEntities:
-    - kube-apiserver
-  - toPorts:
-    - ports:
-      - port: "9443"
-        protocol: TCP
-      - port: "443"
-        protocol: TCP