Ajout Network policies Ingress & CoreDNS

2024-09-27 23:50:32 +02:00 · 2024-09-27 23:50:32 +02:00 · 990ee38a3a
commit 990ee38a3a
parent 161b4c6d58
2 changed files with 36 additions and 0 deletions
--- a/gse/gse-coredns-allow.yaml
+++ b/gse/gse-coredns-allow.yaml
@ -0,0 +1,18 @@
+apiVersion: networking.k8s.io/v1
+kind: NetworkPolicy
+metadata:
+  name: gse-coredns-allow
+  namespace: gse
+spec:
+  podSelector: {}
+  policyTypes:
+    - Egress
+  egress:
+    - to:
+        - namespaceSelector: {}
+          podSelector:
+            matchLabels:
+              k8s-app: kube-dns
+      ports:
+        - port: 53
+          protocol: UDP
--- a/gse/gse-ingress-allow.yaml
+++ b/gse/gse-ingress-allow.yaml
@ -0,0 +1,18 @@
+apiVersion: networking.k8s.io/v1
+kind: NetworkPolicy
+metadata:
+  name: gse-coredns-allow
+  namespace: gse
+spec:
+  podSelector: {}
+  policyTypes:
+    - Egress
+  egress:
+    - to:
+        - namespaceSelector: {}
+          podSelector:
+            matchLabels:
+              k8s-app: kube-dns
+      ports:
+        - port: 53
+          protocol: UDP