cluster

Infrastructure files for Nordgedanken and Midnightthoughts.
git clone git://archive.git.mtrnord.blog/MTRNord/cluster.git
Log | Files | Refs | README

matrix.yaml (3098B)

      1 apiVersion: cilium.io/v2
      2 kind: CiliumNetworkPolicy
      3 metadata:
      4   name: matrix
      5   namespace: matrix
      6 spec:
      7   endpointSelector: {}
      8   egress:
      9     - toEntities:
     10         - world
     11     - toEndpoints:
     12         - matchLabels:
     13             io.kubernetes.pod.namespace: kube-system
     14             k8s-app: kube-dns
     15       toPorts:
     16         - ports:
     17             - port: "53"
     18               protocol: UDP
     19           rules:
     20             dns:
     21               - matchPattern: "*"
     22     - toEndpoints:
     23         - matchLabels:
     24             k8s:app.kubernetes.io/component: proxy
     25             k8s:app.kubernetes.io/managed-by: envoy-gateway
     26             k8s:app.kubernetes.io/name: envoy
     27             k8s:gateway.envoyproxy.io/owning-gateway-name: envoy-gateway
     28             k8s:gateway.envoyproxy.io/owning-gateway-namespace: envoy-gateway
     29             io.kubernetes.pod.namespace: envoy-gateway
     30       toPorts:
     31         - ports:
     32             - port: "10443"
     33             - port: "6697"
     34     - toEndpoints:
     35         - matchLabels:
     36             k8s:app.kubernetes.io/name: draupnir4all
     37             io.kubernetes.pod.namespace: matrix
     38       toPorts:
     39         - ports:
     40             - port: "9000"
     41     - toEndpoints:
     42         - matchLabels:
     43             k8s:app: meowlnir
     44             io.kubernetes.pod.namespace: matrix
     45       toPorts:
     46         - ports:
     47             - port: "29339"
     48     - toEndpoints:
     49         - matchLabels:
     50             k8s:app: rspamd-matrix
     51             io.kubernetes.pod.namespace: matrix
     52       toPorts:
     53         - ports:
     54             - port: "11334"
     55     - toEndpoints:
     56         - matchLabels:
     57             k8s:app: draupnir-synapse-keydb
     58             io.kubernetes.pod.namespace: matrix
     59       toPorts:
     60         - ports:
     61             - port: "6379"
     62     - toEndpoints:
     63         - matchLabels:
     64             k8s:app: heisenbridge
     65             io.kubernetes.pod.namespace: matrix
     66       toPorts:
     67         - ports:
     68             - port: "9898"
     69     - toEndpoints:
     70         - matchLabels:
     71             k8s:app: matrix-synapse-keydb
     72             io.kubernetes.pod.namespace: matrix
     73       toPorts:
     74         - ports:
     75             - port: "6379"
     76     - toEndpoints:
     77         - matchLabels:
     78             k8s:app: pantalaimon-freifunk
     79             io.kubernetes.pod.namespace: matrix
     80       toPorts:
     81         - ports:
     82             - port: "8008"
     83     - toEndpoints:
     84         - matchLabels:
     85             k8s:app.kubernetes.io/instance: draupnir-synapse
     86             io.kubernetes.pod.namespace: matrix
     87       toPorts:
     88         - ports:
     89             - port: "9093"
     90     - toEndpoints:
     91         - matchLabels:
     92             k8s:app.kubernetes.io/instance: matrix-synapse
     93             io.kubernetes.pod.namespace: matrix
     94       toPorts:
     95         - ports:
     96             - port: "9093"
     97     - toEndpoints:
     98         - matchLabels:
     99             k8s:cnpg.io/cluster: pg-cluster-v2
    100             io.kubernetes.pod.namespace: postgres-cluster
    101       toPorts:
    102         - ports:
    103             - port: "5432"
    104     - toEndpoints:
    105         - matchLabels:
    106             k8s:app.kubernetes.io/instance: traefik
    107             io.kubernetes.pod.namespace: traefik-ingress
    108       toPorts:
    109         - ports:
    110             - port: "8443"