fix: add rabbitmq network policies

This commit is contained in:
2025-06-24 13:13:51 +02:00
parent 9176649980
commit 92a0e9e4a6
3 changed files with 97 additions and 0 deletions
@@ -0,0 +1,52 @@
apiVersion: cilium.io/v2
kind: CiliumNetworkPolicy
metadata:
name: allow-inter-node-traffic
namespace: rabbitmq
spec:
description: Allow communication between nodes int the RabbitMQ cluster
egress:
- toEndpoints:
- matchLabels:
app.kubernetes.io/component: rabbitmq
toPorts:
- ports:
- port: "4369"
- endPort: 6500
port: "6000"
- port: "25672"
- port: "35672"
- port: "35673"
- port: "35674"
- port: "35675"
- port: "35676"
- port: "35677"
- port: "35678"
- port: "35679"
- port: "35680"
- port: "35681"
- port: "35682"
endpointSelector:
matchLabels:
app.kubernetes.io/component: rabbitmq
ingress:
- fromEndpoints:
- matchLabels:
app.kubernetes.io/component: rabbitmq
toPorts:
- ports:
- port: "4369"
- endPort: 6500
port: "6000"
- port: "25672"
- port: "35672"
- port: "35673"
- port: "35674"
- port: "35675"
- port: "35676"
- port: "35677"
- port: "35678"
- port: "35679"
- port: "35680"
- port: "35681"
- port: "35682"
@@ -0,0 +1,18 @@
apiVersion: cilium.io/v2
kind: CiliumNetworkPolicy
metadata:
name: allow-operator-traffic
namespace: rabbitmq
spec:
description: Allow access to the RabbitMQ operator
endpointSelector:
matchLabels:
app.kubernetes.io/component: rabbitmq
ingress:
- fromEndpoints:
- matchLabels:
app.kubernetes.io/component: rabbitmq-operator
toPorts:
- ports:
- port: "15672"
- port: "15671"
@@ -0,0 +1,27 @@
apiVersion: cilium.io/v2
kind: CiliumNetworkPolicy
metadata:
name: allow-rabbitmq-traffic
namespace: rabbitmq
spec:
description: Allow access to the RabbitMQ cluster
endpointSelector:
matchLabels:
app.kubernetes.io/component: rabbitmq
ingress:
- toPorts:
- ports:
- port: "5672"
- port: "5671"
- port: "5552"
- port: "5551"
- port: "15672"
- port: "15671"
- port: "61613"
- port: "61614"
- port: "1883"
- port: "8883"
- port: "15674"
- port: "15675"
- port: "15692"
- port: "15691"