Merge pull request 'Ajout Network policies Ingress & CoreDNS' (#10) from master into prod

Reviewed-on: #10
2024-09-27 23:52:27 +02:00 · 2024-09-27 23:52:27 +02:00 · ca42316abd
commit ca42316abd
parent 259877c209 990ee38a3a
2 changed files with 36 additions and 0 deletions
--- a/gse/gse-coredns-allow.yaml
+++ b/gse/gse-coredns-allow.yaml
@ -0,0 +1,18 @@
+apiVersion: networking.k8s.io/v1
+kind: NetworkPolicy
+metadata:
+  name: gse-coredns-allow
+  namespace: gse
+spec:
+  podSelector: {}
+  policyTypes:
+    - Egress
+  egress:
+    - to:
+        - namespaceSelector: {}
+          podSelector:
+            matchLabels:
+              k8s-app: kube-dns
+      ports:
+        - port: 53
+          protocol: UDP
--- a/gse/gse-ingress-allow.yaml
+++ b/gse/gse-ingress-allow.yaml
@ -0,0 +1,18 @@
+apiVersion: networking.k8s.io/v1
+kind: NetworkPolicy
+metadata:
+  name: gse-coredns-allow
+  namespace: gse
+spec:
+  podSelector: {}
+  policyTypes:
+    - Egress
+  egress:
+    - to:
+        - namespaceSelector: {}
+          podSelector:
+            matchLabels:
+              k8s-app: kube-dns
+      ports:
+        - port: 53
+          protocol: UDP