fix: misc attempts at fixing UR loops in kyverno

2024-02-18 21:09:09 +01:00
parent 667bdf3ac0
commit 5793244141
8 changed files with 148 additions and 101 deletions
@@ -0,0 +1,16 @@
+apiVersion: cilium.io/v2
+kind: CiliumNetworkPolicy
+metadata:
+  name: allow-atlantis-external-services
+  namespace: atlantis
+spec:
+  egress:
+  - toFQDNs:
+    - matchName: api.github.com
+    - matchName: dapr.github.io
+    - matchName: gitlab.com
+    - matchPattern: '*.gitlab.com'
+    - matchPattern: "*.k1.itpartner.no"
+    - matchName: analytics.loft.rocks
+  endpointSelector:
+    matchLabels: {}
@@ -1,22 +1,5 @@
 apiVersion: cilium.io/v2
 kind: CiliumNetworkPolicy
-metadata:
-  name: allow-external-services
-  namespace: atlantis
-spec:
-  egress:
-  - toFQDNs:
-    - matchName: api.github.com
-    - matchName: dapr.github.io
-    - matchName: gitlab.com
-    - matchPattern: '*.gitlab.com'
-    - matchPattern: "*.k1.itpartner.no"
-    - matchName: analytics.loft.rocks
-  endpointSelector:
-    matchLabels: {}
---
-apiVersion: cilium.io/v2
-kind: CiliumNetworkPolicy
 metadata:
  name: allow-atlantis-services
  namespace: atlantis
@@ -1,12 +1,12 @@
 apiVersion: kyverno.io/v1
 kind: ClusterPolicy
 metadata:
-  name: sync-rabbitmq-secret
+  name: sync-rabbitmq-secrets
 spec:
  background: true
  generateExisting: true
  rules:
-  - name: sync-rabbitmq-secret
+  - name: sync-prod-rabbitmq-secret
    generate:
      apiVersion: v1
      kind: Secret