cluster

Infrastructure files for Nordgedanken and Midnightthoughts.
git clone git://archive.git.mtrnord.blog/MTRNord/cluster.git
Log | Files | Refs | README

network_policy.yaml (1543B)

      1 apiVersion: networking.k8s.io/v1
      2 kind: NetworkPolicy
      3 metadata:
      4   name: deployment-docuseal
      5   namespace: docuseal
      6 spec:
      7   podSelector:
      8     matchLabels:
      9       app.kubernetes.io/instance: docuseal
     10       app.kubernetes.io/name: docuseal
     11   policyTypes:
     12     - Ingress
     13     - Egress
     14   ingress:
     15     - from:
     16         - namespaceSelector:
     17             matchLabels:
     18               kubernetes.io/metadata.name: envoy-gateway
     19           podSelector:
     20             matchLabels:
     21               app.kubernetes.io/component: proxy
     22               app.kubernetes.io/name: envoy
     23               gateway.envoyproxy.io/owning-gateway-name: envoy-gateway
     24               gateway.envoyproxy.io/owning-gateway-namespace: envoy-gateway
     25       ports:
     26         - port: 3000
     27           protocol: TCP
     28   egress:
     29     - to:
     30         - namespaceSelector:
     31             matchLabels:
     32               kubernetes.io/metadata.name: postgres-cluster
     33           podSelector:
     34             matchLabels:
     35               cnpg.io/cluster: pg-cluster-v2
     36               cnpg.io/instanceName: pg-cluster-v2-5
     37               cnpg.io/instanceRole: primary
     38               cnpg.io/podRole: instance
     39               role: primary
     40       ports:
     41         - port: 5432
     42           protocol: TCP
     43     - to:
     44         - namespaceSelector: {}
     45           podSelector:
     46             matchLabels:
     47               k8s-app: kube-dns
     48       ports:
     49         - port: 53
     50           protocol: UDP
     51     - to:
     52         - ipBlock:
     53             cidr: 169.254.0.0/16
     54       ports:
     55         - port: 53
     56           protocol: TCP
     57         - port: 53
     58           protocol: UDP