platform/manifests
1
1
Fork 0
Code Issues 7 Pull Requests 6 Actions Packages Projects Releases Wiki Activity

fix: add cilium cluster feature guards to network policies

Browse Source
This commit is contained in:
Jonas Juselius
2025-06-24 14:26:03 +02:00
parent 4cff341fb0
commit d5e0da1692
78 changed files with 158 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
values/argo/manifests/policies/CiliumNetworkPolicy-allow-applicationset-ingress.yaml
+2
View File
@@ -1,3 +1,4 @@
{{- if .Values.clusterConfig.cilium.enabled }}
apiVersion: cilium.io/v2
kind: CiliumNetworkPolicy
metadata:
@@ -12,3 +13,4 @@ spec:
- fromEndpoints:
- matchLabels:
io.kubernetes.pod.namespace: ingress-nginx
{{- end }}
values/argo/manifests/policies/CiliumNetworkPolicy-allow-argo-notifications.yaml
+2
View File
@@ -1,3 +1,4 @@
{{- if .Values.clusterConfig.cilium.enabled }}
apiVersion: cilium.io/v2
kind: CiliumNetworkPolicy
metadata:
@@ -11,3 +12,4 @@ spec:
endpointSelector:
matchLabels:
app.kubernetes.io/component: notifications-controller
{{- end }}
values/argo/manifests/policies/CiliumNetworkPolicy-allow-argo-repo-access-applicationset.yaml
+2
View File
@@ -1,3 +1,4 @@
{{- if .Values.clusterConfig.cilium.enabled }}
apiVersion: cilium.io/v2
kind: CiliumNetworkPolicy
metadata:
@@ -11,3 +12,4 @@ spec:
endpointSelector:
matchLabels:
app.kubernetes.io/component: applicationset-controller
{{- end }}
values/argo/manifests/policies/CiliumNetworkPolicy-allow-argo-repo-access.yaml
+2
View File
@@ -1,3 +1,4 @@
{{- if .Values.clusterConfig.cilium.enabled }}
apiVersion: cilium.io/v2
kind: CiliumNetworkPolicy
metadata:
@@ -11,3 +12,4 @@ spec:
endpointSelector:
matchLabels:
app.kubernetes.io/component: repo-server
{{- end }}
values/argo/manifests/policies/CiliumNetworkPolicy-allow-chartmuseum-ingress.yaml
+2
View File
@@ -1,3 +1,4 @@
{{- if .Values.clusterConfig.cilium.enabled }}
apiVersion: cilium.io/v2
kind: CiliumNetworkPolicy
metadata:
@@ -12,3 +13,4 @@ spec:
- fromEndpoints:
- matchLabels:
io.kubernetes.pod.namespace: ingress-nginx
{{- end }}
values/argo/manifests/policies/CiliumNetworkPolicy-allow-image-updater-repo-access.yaml
+2
View File
@@ -1,3 +1,4 @@
{{- if .Values.clusterConfig.cilium.enabled }}
apiVersion: cilium.io/v2
kind: CiliumNetworkPolicy
metadata:
@@ -11,3 +12,4 @@ spec:
endpointSelector:
matchLabels:
app.kubernetes.io/name: argocd-image-updater
{{- end }}
values/argo/manifests/policies/CiliumNetworkPolicy-allow-ingress.yaml
+2
View File
@@ -1,3 +1,4 @@
{{- if .Values.clusterConfig.cilium.enabled }}
apiVersion: cilium.io/v2
kind: CiliumNetworkPolicy
metadata:
@@ -12,3 +13,4 @@ spec:
- fromEndpoints:
- matchLabels:
io.kubernetes.pod.namespace: ingress-nginx
{{- end }}
values/argo/manifests/policies/CiliumNetworkPolicy-allow-kube-api.yaml
+2
View File
@@ -1,3 +1,4 @@
{{- if .Values.clusterConfig.cilium.enabled }}
apiVersion: cilium.io/v2
kind: CiliumNetworkPolicy
metadata:
@@ -14,3 +15,4 @@ spec:
protocol: TCP
endpointSelector:
matchLabels: {}
{{- end }}
values/argo/manifests/policies/CiliumNetworkPolicy-allow-microsoft-sso.yaml
+2
View File
@@ -1,3 +1,4 @@
{{- if .Values.clusterConfig.cilium.enabled }}
apiVersion: cilium.io/v2
kind: CiliumNetworkPolicy
metadata:
@@ -14,3 +15,4 @@ spec:
endpointSelector:
matchLabels:
app.kubernetes.io/name: argocd-dex-server
{{- end }}
values/argo/manifests/policies/CiliumNetworkPolicy-allow-prometheus-metrics-rollout.yaml
+2
View File
@@ -1,3 +1,4 @@
{{- if .Values.clusterConfig.cilium.enabled }}
apiVersion: cilium.io/v2
kind: CiliumNetworkPolicy
metadata:
@@ -16,3 +17,4 @@ spec:
- ports:
- port: "8090"
protocol: TCP
{{- end }}
values/argo/manifests/policies/CiliumNetworkPolicy-allow-prometheus-metrics-workflows.yaml
+2
View File
@@ -1,3 +1,4 @@
{{- if .Values.clusterConfig.cilium.enabled }}
apiVersion: cilium.io/v2
kind: CiliumNetworkPolicy
metadata:
@@ -16,3 +17,4 @@ spec:
- ports:
- port: "9090"
protocol: TCP
{{- end }}
values/argo/manifests/policies/CiliumNetworkPolicy-allow-prometheus-metrics.yaml
+2
View File
@@ -1,3 +1,4 @@
{{- if .Values.clusterConfig.cilium.enabled }}
apiVersion: cilium.io/v2
kind: CiliumNetworkPolicy
metadata:
@@ -28,3 +29,4 @@ spec:
protocol: TCP
- port: "5558"
protocol: TCP
{{- end }}