feat(gotosocial): TLS netpols

2026-01-28 02:18:24 +00:00 · 2023-05-28 12:25:29 +08:00
parent b7183421d9
commit d4e53b7718
1 changed files with 10 additions and 3 deletions
--- a/kube/3-deploy/2-apps/gotosocial/app/netpol.yaml
+++ b/kube/3-deploy/2-apps/gotosocial/app/netpol.yaml
@@ -21,9 +21,16 @@ spec:
        - ports:
            - port: "8080"
              protocol: TCP
-          rules:
-            http:
-              - {}
+    # Cloudflare Tunnel
+    - fromEndpoints:
+        - matchLabels:
+            io.kubernetes.pod.namespace: cloudflare
+            app.kubernetes.io/instance: cloudflared
+            app.kubernetes.io/name: cloudflared
+      toPorts:
+        - ports:
+            - port: "8080"
+              protocol: TCP
  egress:
    # same namespace
    - toEndpoints: