this repo has no description
downloads: Add netpol and probably screw it up...
+60
+1
cluster/apps/downloads/kustomization.yaml
+1
cluster/apps/downloads/kustomization.yaml
+59
cluster/apps/downloads/netpol.yaml
+59
cluster/apps/downloads/netpol.yaml
···
1
+
apiVersion: cilium.io/v2
2
+
kind: CiliumNetworkPolicy
3
+
metadata:
4
+
name: vpn-only
5
+
namespace: downloads
6
+
spec:
7
+
endpointSelector: {}
8
+
ingress:
9
+
- fromEndpoints:
10
+
- {}
11
+
- fromEndpoints:
12
+
- matchLabels:
13
+
k8s:app.kubernetes.io/name: pod-gateway
14
+
io.kubernetes.pod.namespace: vpn
15
+
toPorts:
16
+
- ports:
17
+
- port: "8472"
18
+
protocol: UDP
19
+
- port: "68"
20
+
protocol: UDP
21
+
- fromEndpoints:
22
+
- matchLabels:
23
+
k8s:app.kubernetes.io/instance: ingress-nginx
24
+
io.kubernetes.pod.namespace: networking
25
+
egress:
26
+
- toEndpoints:
27
+
- {}
28
+
- toEndpoints:
29
+
- matchLabels:
30
+
io.kubernetes.pod.namespace: kube-system
31
+
k8s-app: kube-dns
32
+
toPorts:
33
+
- ports:
34
+
- port: "53"
35
+
protocol: UDP
36
+
rules:
37
+
dns:
38
+
- matchPattern: "*"
39
+
- toEndpoints:
40
+
- matchLabels:
41
+
k8s:app.kubernetes.io/instance: ingress-nginx
42
+
io.kubernetes.pod.namespace: networking
43
+
toPorts:
44
+
- ports:
45
+
- port: "443"
46
+
- toEndpoints:
47
+
- matchLabels:
48
+
k8s:app.kubernetes.io/name: pod-gateway
49
+
io.kubernetes.pod.namespace: vpn
50
+
toPorts:
51
+
- ports:
52
+
- port: "8472"
53
+
protocol: UDP
54
+
- port: "67"
55
+
protocol: UDP
56
+
- icmps:
57
+
- fields:
58
+
- type: 8
59
+
family: IPv4