commit 85bcc8e64fe05666816103c346b25cdb3d43dd8e parent 6bdcd90ff6f63f34be0feb3b5590085e43f8a815 Author: MTRNord <MTRNord@users.noreply.github.com> Date: Mon, 20 Oct 2025 21:51:28 +0200 meow Signed-off-by: MTRNord <MTRNord@users.noreply.github.com> Diffstat:
| M | apps/talos_cluster/envoy-gateway/kustomization.yaml | | | 1 | + |
| A | apps/talos_cluster/envoy-gateway/networkpolicy.yaml | | | 30 | ++++++++++++++++++++++++++++++ |
2 files changed, 31 insertions(+), 0 deletions(-)
diff --git a/apps/talos_cluster/envoy-gateway/kustomization.yaml b/apps/talos_cluster/envoy-gateway/kustomization.yaml @@ -5,3 +5,4 @@ resources: - repository.yaml - release.yaml - gateway_settings.yaml + - networkpolicy.yaml diff --git a/apps/talos_cluster/envoy-gateway/networkpolicy.yaml b/apps/talos_cluster/envoy-gateway/networkpolicy.yaml @@ -0,0 +1,30 @@ +apiVersion: cilium.io/v2 +kind: CiliumNetworkPolicy +metadata: + name: ingress + namespace: envoy-gateway +spec: + endpointSelector: {} + ingress: + - fromCIDRSet: + - cidr: 0.0.0.0/0 + except: + - 52.230.152.1/24 + - 20.171.206.1/24 + - 20.171.207.1/24 + - 4.227.36.1/24 + - 20.125.66.80/32 + - 172.182.204.1/24 + - 172.182.214.1/24 + - 172.182.215.1/24 + - 132.196.86.1/24 + - 172.182.202.1/24 + - 172.182.207.1/24 + - 74.7.227.128/32 + - 74.7.227.1/24 + - 74.7.230.1/24 + - 74.7.228.1/24 + - fromEndpoints: + - {} + - fromEntities: + - cluster