mirror of
https://github.com/outbackdingo/cozystack.git
synced 2026-01-28 02:18:36 +00:00
26 lines
940 B
Diff
26 lines
940 B
Diff
diff --git a/packages/system/fluxcd-operator/charts/flux-operator/templates/network-policy.yaml b/packages/system/fluxcd-operator/charts/flux-operator/templates/network-policy.yaml
|
|
new file mode 100644
|
|
--- /dev/null (revision 52a23eacfc32430d8b008b765c64a81526521bae)
|
|
+++ b/packages/system/fluxcd-operator/charts/flux-operator/templates/network-policy.yaml (revision 52a23eacfc32430d8b008b765c64a81526521bae)
|
|
@@ -0,0 +1,18 @@
|
|
+{{- if .Capabilities.APIVersions.Has "cilium.io/v2/CiliumClusterwideNetworkPolicy" }}
|
|
+apiVersion: cilium.io/v2
|
|
+kind: CiliumClusterwideNetworkPolicy
|
|
+metadata:
|
|
+ name: {{ include "flux-operator.fullname" . }}-restrict
|
|
+spec:
|
|
+ nodeSelector: {}
|
|
+ ingressDeny:
|
|
+ - fromEntities:
|
|
+ - world
|
|
+ toPorts:
|
|
+ - ports:
|
|
+ - port: "8080"
|
|
+ protocol: TCP
|
|
+ - port: "8081"
|
|
+ protocol: TCP
|
|
+ ingress:
|
|
+ - fromEntities:
|
|
+ - cluster
|
|
+{{- end }}
|