commit 0ed17cc88b48652f88f9ba65fde3b68caff13c08 parent d2004ae091944dcb491ffc124c986c6d1d963517 Author: MTRNord <mtrnord1@gmail.com> Date: Sat, 29 Mar 2025 13:46:24 +0100 Docuseal networkpolicy Diffstat:
| M | apps/base/docuseal/kustomization.yaml | | | 1 | + |
| A | apps/base/docuseal/network_policy.yaml | | | 50 | ++++++++++++++++++++++++++++++++++++++++++++++++++ |
2 files changed, 51 insertions(+), 0 deletions(-)
diff --git a/apps/base/docuseal/kustomization.yaml b/apps/base/docuseal/kustomization.yaml @@ -4,3 +4,4 @@ namespace: docuseal resources: - repository.yaml - release.yaml + - network_policy.yaml diff --git a/apps/base/docuseal/network_policy.yaml b/apps/base/docuseal/network_policy.yaml @@ -0,0 +1,50 @@ +apiVersion: networking.k8s.io/v1 +kind: NetworkPolicy +metadata: + name: deployment-docuseal + namespace: docuseal +spec: + podSelector: + matchLabels: + app.kubernetes.io/instance: docuseal + app.kubernetes.io/name: docuseal + policyTypes: + - Ingress + - Egress + ingress: + - from: + - namespaceSelector: + matchLabels: + kubernetes.io/metadata.name: envoy-gateway + podSelector: + matchLabels: + app.kubernetes.io/component: proxy + app.kubernetes.io/name: envoy + gateway.envoyproxy.io/owning-gateway-name: envoy-gateway + gateway.envoyproxy.io/owning-gateway-namespace: envoy-gateway + ports: + - port: 3000 + protocol: TCP + egress: + - to: + - namespaceSelector: + matchLabels: + kubernetes.io/metadata.name: postgres-cluster + podSelector: + matchLabels: + cnpg.io/cluster: pg-cluster-v2 + cnpg.io/instanceName: pg-cluster-v2-5 + cnpg.io/instanceRole: primary + cnpg.io/podRole: instance + role: primary + ports: + - port: 5432 + protocol: TCP + - to: + - namespaceSelector: {} + podSelector: + matchLabels: + k8s-app: kube-dns + ports: + - port: 53 + protocol: UDP