symcrest/k8s-platform
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Added base Cilium egress policies for platform namespaces

Browse source
This commit is contained in:
Arvind Prabhakar 2026-06-30 22:52:24 +00:00
commit 69db3bd424
4 changed files with 80 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

20
infrastructure/network-policies/forgejo/base-egress.yaml Normal file
View file

@ -0,0 +1,20 @@
apiVersion: cilium.io/v2
kind: CiliumNetworkPolicy
metadata:
name: apps-base-egress
namespace: forgejo
spec:
endpointSelector: {}
egress:
- toEntities:
- kube-apiserver
- toEndpoints:
- matchLabels:
k8s:io.kubernetes.pod.namespace: kube-system
k8s:k8s-app: kube-dns
toPorts:
- ports:
- port: "53"
protocol: UDP
- port: "53"
protocol: TCP

20
infrastructure/network-policies/openproject/base-egress.yaml Normal file
View file

@ -0,0 +1,20 @@
apiVersion: cilium.io/v2
kind: CiliumNetworkPolicy
metadata:
name: apps-base-egress
namespace: openproject
spec:
endpointSelector: {}
egress:
- toEntities:
- kube-apiserver
- toEndpoints:
- matchLabels:
k8s:io.kubernetes.pod.namespace: kube-system
k8s:k8s-app: kube-dns
toPorts:
- ports:
- port: "53"
protocol: UDP
- port: "53"
protocol: TCP

20
infrastructure/network-policies/pgadmin/base-egress.yaml Normal file
View file

@ -0,0 +1,20 @@
apiVersion: cilium.io/v2
kind: CiliumNetworkPolicy
metadata:
name: apps-base-egress
namespace: pgadmin
spec:
endpointSelector: {}
egress:
- toEntities:
- kube-apiserver
- toEndpoints:
- matchLabels:
k8s:io.kubernetes.pod.namespace: kube-system
k8s:k8s-app: kube-dns
toPorts:
- ports:
- port: "53"
protocol: UDP
- port: "53"
protocol: TCP

20
infrastructure/network-policies/platform-services/base-egress.yaml Normal file
View file

@ -0,0 +1,20 @@
apiVersion: cilium.io/v2
kind: CiliumNetworkPolicy
metadata:
name: apps-base-egress
namespace: platform-services
spec:
endpointSelector: {}
egress:
- toEntities:
- kube-apiserver
- toEndpoints:
- matchLabels:
k8s:io.kubernetes.pod.namespace: kube-system
k8s:k8s-app: kube-dns
toPorts:
- ports:
- port: "53"
protocol: UDP
- port: "53"
protocol: TCP