this repo has no description
Add netpol
+54
+1
k8s/nebula/apps/vpn/vpn-gateway/app/kustomization.yaml
+1
k8s/nebula/apps/vpn/vpn-gateway/app/kustomization.yaml
+53
k8s/nebula/apps/vpn/vpn-gateway/app/netpol.yaml
+53
k8s/nebula/apps/vpn/vpn-gateway/app/netpol.yaml
···
1
+
---
2
+
apiVersion: cilium.io/v2
3
+
kind: CiliumNetworkPolicy
4
+
metadata:
5
+
name: vpn-gateway
6
+
labels:
7
+
app.kubernetes.io/instance: vpn-gateway
8
+
app.kubernetes.io/name: vpn-gateway
9
+
spec:
10
+
endpointSelector:
11
+
matchLabels:
12
+
app.kubernetes.io/instance: vpn-gateway
13
+
app.kubernetes.io/name: vpn-gateway
14
+
egress:
15
+
- toCIDR:
16
+
- 0.0.0.0/0
17
+
- ::/0
18
+
toPorts:
19
+
- ports:
20
+
- port: "1637"
21
+
protocol: UDP
22
+
- ports:
23
+
- port: "53"
24
+
protocol: TCP
25
+
- toEntities:
26
+
- cluster
27
+
---
28
+
apiVersion: cilium.io/v2
29
+
kind: CiliumNetworkPolicy
30
+
metadata:
31
+
name: vpn-gateway-vxlan
32
+
labels:
33
+
app.kubernetes.io/instance: vpn-gateway
34
+
app.kubernetes.io/name: vpn-gateway
35
+
spec:
36
+
endpointSelector:
37
+
matchLabels:
38
+
app.kubernetes.io/instance: vpn-gateway
39
+
app.kubernetes.io/name: vpn-gateway
40
+
egress:
41
+
- toPorts:
42
+
- ports:
43
+
- port: "4789"
44
+
protocol: UDP
45
+
ingress:
46
+
- toPorts:
47
+
- ports:
48
+
- port: "4789"
49
+
protocol: UDP
50
+
- icmps:
51
+
- fields:
52
+
- type: 8
53
+
family: IPv4