niks: Add gc and correct s3 url

2026-06-09 15:01:12 +02:00
parent 65a31e835d
commit a90381545d
3 changed files with 85 additions and 1 deletions
@@ -0,0 +1,35 @@
+{{- if .Values.clusterConfig.cilium.enabled }}
+apiVersion: cilium.io/v2
+kind: CiliumNetworkPolicy
+metadata:
+  name: allow-gc-egress
+  namespace: niks3
+spec:
+  description: niks3-gc job egress to the in-namespace niks3 server and kube-dns
+  endpointSelector:
+    matchLabels:
+      app: niks3-gc
+  egress:
+    # niks3 server HTTP API (same namespace)
+    - toEndpoints:
+        - matchLabels:
+            io.kubernetes.pod.namespace: niks3
+      toPorts:
+        - ports:
+            - port: "5751"
+              protocol: TCP
+    # DNS resolution
+    - toEndpoints:
+        - matchLabels:
+            io.kubernetes.pod.namespace: kube-system
+            k8s-app: kube-dns
+      toPorts:
+        - ports:
+            - port: "53"
+              protocol: UDP
+            - port: "53"
+              protocol: TCP
+          rules:
+            dns:
+              - matchPattern: "*"
+{{- end }}