diff --git a/infrastructure/network-policies/forgejo/base-egress.yaml b/infrastructure/network-policies/forgejo/base-egress.yaml index 794cc95..f95cac4 100644 --- a/infrastructure/network-policies/forgejo/base-egress.yaml +++ b/infrastructure/network-policies/forgejo/base-egress.yaml @@ -1,13 +1,18 @@ apiVersion: cilium.io/v2 kind: CiliumNetworkPolicy metadata: - name: apps-base-egress + name: forgejo-base-egress namespace: forgejo + spec: endpointSelector: {} + egress: + # Allow access to the Kubernetes API - toEntities: - kube-apiserver + + # Allow DNS lookups - toEndpoints: - matchLabels: k8s:io.kubernetes.pod.namespace: kube-system @@ -18,3 +23,13 @@ spec: protocol: UDP - port: "53" protocol: TCP + + # Allow Forgejo to talk to PostgreSQL + - toEndpoints: + - matchLabels: + k8s:io.kubernetes.pod.namespace: platform-services + app: platform-postgres + toPorts: + - ports: + - port: "5432" + protocol: TCP diff --git a/infrastructure/network-policies/openproject/base-egress.yaml b/infrastructure/network-policies/openproject/base-egress.yaml index 8196264..71b8143 100644 --- a/infrastructure/network-policies/openproject/base-egress.yaml +++ b/infrastructure/network-policies/openproject/base-egress.yaml @@ -1,7 +1,7 @@ apiVersion: cilium.io/v2 kind: CiliumNetworkPolicy metadata: - name: apps-base-egress + name: openproject-base-egress namespace: openproject spec: endpointSelector: {} diff --git a/infrastructure/network-policies/pgadmin/base-egress.yaml b/infrastructure/network-policies/pgadmin/base-egress.yaml index 6ab05a7..bcaf86a 100644 --- a/infrastructure/network-policies/pgadmin/base-egress.yaml +++ b/infrastructure/network-policies/pgadmin/base-egress.yaml @@ -1,7 +1,7 @@ apiVersion: cilium.io/v2 kind: CiliumNetworkPolicy metadata: - name: apps-base-egress + name: pgadmin-base-egress namespace: pgadmin spec: endpointSelector: {} diff --git a/infrastructure/network-policies/platform-services/base-egress.yaml b/infrastructure/network-policies/platform-services/base-egress.yaml index e3a4ffc..3bf269e 100644 --- a/infrastructure/network-policies/platform-services/base-egress.yaml +++ b/infrastructure/network-policies/platform-services/base-egress.yaml @@ -1,7 +1,7 @@ apiVersion: cilium.io/v2 kind: CiliumNetworkPolicy metadata: - name: apps-base-egress + name: platform-services-base-egress namespace: platform-services spec: endpointSelector: {}