cluster

Infrastructure files for Nordgedanken and Midnightthoughts.
git clone git://archive.git.mtrnord.blog/MTRNord/cluster.git
Log | Files | Refs | README

block_ips.yaml (1036B)

      1 apiVersion: cilium.io/v2
      2 kind: CiliumNetworkPolicy
      3 metadata:
      4   name: cidr-rule
      5   namespace: matrix
      6 spec:
      7   endpointSelector:
      8     matchLabels:
      9       app.kubernetes.io/name: matrix-synapse
     10   ingress:
     11     - fromCIDRSet:
     12         - cidr: 0.0.0.0/0
     13           except:
     14             - 169.150.247.37/32
     15             - 2400:52e0:1e00::1080:1/128
     16             - 143.244.38.136/32
     17             - 2a01:4f9:4b:4b0b::2/128
     18     - fromEntities:
     19         - cluster
     20     - fromEndpoints:
     21         - {}
     22   egress:
     23     - toCIDRSet:
     24         - cidr: 0.0.0.0/0
     25           except:
     26             - 169.150.247.37/32
     27             - 2400:52e0:1e00::1080:1/128
     28             - 143.244.38.136/32
     29             - 2a01:4f9:4b:4b0b::2/128
     30     - toEndpoints:
     31         - {}
     32     - toEntities:
     33         - cluster
     34     - toEndpoints:
     35         - matchLabels:
     36             io.kubernetes.pod.namespace: kube-system
     37             k8s-app: kube-dns
     38       toPorts:
     39         - ports:
     40             - port: "53"
     41               protocol: UDP
     42           rules:
     43             dns:
     44               - matchPattern: "*"