fix(spegel): Correct policies
This commit is contained in:
@@ -3,12 +3,12 @@ apiVersion: cilium.io/v2
|
|||||||
kind: CiliumNetworkPolicy
|
kind: CiliumNetworkPolicy
|
||||||
metadata:
|
metadata:
|
||||||
name: allow-api-server
|
name: allow-api-server
|
||||||
namespace: slinky
|
namespace: spegel
|
||||||
spec:
|
spec:
|
||||||
egress:
|
egress:
|
||||||
- toEntities:
|
- toEntities:
|
||||||
- kube-apiserver
|
- kube-apiserver
|
||||||
endpointSelector:
|
endpointSelector:
|
||||||
matchLabels:
|
matchLabels:
|
||||||
app.kubernetes.io/instance: slurm-operator
|
app.kubernetes.io/instance: spegel
|
||||||
{{- end}}
|
{{- end}}
|
||||||
|
|||||||
@@ -1,14 +0,0 @@
|
|||||||
{{- if .Values.clusterConfig.cilium.enabled }}
|
|
||||||
apiVersion: cilium.io/v2
|
|
||||||
kind: CiliumNetworkPolicy
|
|
||||||
metadata:
|
|
||||||
name: allow-host-to-slurm-operator
|
|
||||||
namespace: slinky
|
|
||||||
spec:
|
|
||||||
endpointSelector:
|
|
||||||
matchLabels:
|
|
||||||
app.kubernetes.io/instance: slurm-operator
|
|
||||||
ingress:
|
|
||||||
- fromEntities:
|
|
||||||
- host
|
|
||||||
{{- end}}
|
|
||||||
@@ -3,11 +3,11 @@ apiVersion: cilium.io/v2
|
|||||||
kind: CiliumNetworkPolicy
|
kind: CiliumNetworkPolicy
|
||||||
metadata:
|
metadata:
|
||||||
name: allow-prometheus-metrics
|
name: allow-prometheus-metrics
|
||||||
namespace: slinky
|
namespace: spegel
|
||||||
spec:
|
spec:
|
||||||
endpointSelector:
|
endpointSelector:
|
||||||
matchLabels:
|
matchLabels:
|
||||||
app.kubernetes.io/instance: slurm-operator
|
app.kubernetes.io/instance: spegel
|
||||||
ingress:
|
ingress:
|
||||||
- fromEndpoints:
|
- fromEndpoints:
|
||||||
- matchLabels:
|
- matchLabels:
|
||||||
|
|||||||
@@ -1,20 +0,0 @@
|
|||||||
{{- if .Values.clusterConfig.cilium.enabled }}
|
|
||||||
apiVersion: cilium.io/v2
|
|
||||||
kind: CiliumNetworkPolicy
|
|
||||||
metadata:
|
|
||||||
name: allow-remote-node-webhooks
|
|
||||||
namespace: slinky
|
|
||||||
spec:
|
|
||||||
endpointSelector:
|
|
||||||
matchLabels: {}
|
|
||||||
ingress:
|
|
||||||
- fromEntities:
|
|
||||||
- kube-apiserver
|
|
||||||
- remote-node
|
|
||||||
toPorts:
|
|
||||||
- ports:
|
|
||||||
- port: "443"
|
|
||||||
protocol: TCP
|
|
||||||
- port: "9443"
|
|
||||||
protocol: TCP
|
|
||||||
{{- end}}
|
|
||||||
Reference in New Issue
Block a user