feat(cilium): netpols

2026-01-27 18:18:26 +00:00 · 2025-08-25 00:51:22 +08:00
parent 095ba3382f
commit a026dfa4a1
1 changed files with 3 additions and 0 deletions
--- a/kube/deploy/core/_networking/cilium/netpols/labelled-allow-egress.yaml
+++ b/kube/deploy/core/_networking/cilium/netpols/labelled-allow-egress.yaml
@@ -459,6 +459,9 @@ spec:
    matchLabels:
      egress.home.arpa/mullvad: allow
  egress:
+    - # direct
+      toFQDNs:
+        - matchPattern: "*.relays.mullvad.net"
    - # SOCKS5 proxy
      toCIDRSet:
        - cidr: "10.8.0.1/32"