cluster

commit 1067425f2ba6c36a1e96ae5e7cc4ceab06331ec2
parent 12f541d59f4dcc7288fec989281cc5959621e9af
Author: MTRNord <MTRNord@users.noreply.github.com>
Date:   Fri,  6 Mar 2026 12:17:32 +0100

try to make hubble dns work

Signed-off-by: MTRNord <MTRNord@users.noreply.github.com>

Diffstat:
A
infrastructure_talos/configs/hubble-dns-visibility.yaml
 | 
18
++++++++++++++++++
M
infrastructure_talos/configs/kustomization.yaml
 | 
1
+

2 files changed, 19 insertions(+), 0 deletions(-)
diff --git a/infrastructure_talos/configs/hubble-dns-visibility.yaml b/infrastructure_talos/configs/hubble-dns-visibility.yaml
@@ -0,0 +1,18 @@
+apiVersion: cilium.io/v2
+kind: CiliumClusterwideNetworkPolicy
+metadata:
+  name: dns-visibility
+spec:
+  endpointSelector: {}
+  egress:
+    - toEndpoints:
+        - matchLabels:
+            io.kubernetes.pod.namespace: kube-system
+            k8s-app: kube-dns
+      toPorts:
+        - ports:
+            - port: "53"
+              protocol: ANY
+          rules:
+            dns:
+              - matchPattern: "*"
diff --git a/infrastructure_talos/configs/kustomization.yaml b/infrastructure_talos/configs/kustomization.yaml
@@ -9,3 +9,4 @@ resources:
   - cnpg-cluster.yaml
   - velero-schedules.yaml
   - velero-alerts.yaml
+  - hubble-dns-visibility.yaml