mirror of
https://github.com/outbackdingo/cozystack.git
synced 2026-01-27 10:18:39 +00:00
e89896fdba
This patch updates the Flux Operator Deployment to remove hostPort and hostNetwork, ensuring that ports 8080 and 8081 are only accessible within the cluster. This prevents external exposure and improves security. ```release-note [flux] Close Flux Operator ports (8080/8081) to external access for improved security. ``` <!-- Thank you for making a contribution! Here are some tips for you: - Start the PR title with the [label] of Cozystack component: - For system components: [platform], [system], [linstor], [cilium], [kube-ovn], [dashboard], [cluster-api], etc. - For managed apps: [apps], [tenant], [kubernetes], [postgres], [virtual-machine] etc. - For development and maintenance: [tests], [ci], [docs], [maintenance]. - If it's a work in progress, consider creating this PR as a draft. - Don't hesistate to ask for opinion and review in the community chats, even if it's still a draft. - Add the label `backport` if it's a bugfix that needs to be backported to a previous version. --> ## What this PR does ### Release note <!-- Write a release note: - Explain what has changed internally and for users. - Start with the same [label] as in the PR title - Follow the guidelines at https://github.com/kubernetes/community/blob/master/contributors/guide/release-notes.md. --> <!-- This is an auto-generated comment: release notes by coderabbit.ai --> ## Summary by CodeRabbit * **Security** * Added a cluster-wide network policy for the Flux Operator to block external access to internal service ports (notably TCP 8080 and 8081) while preserving intra-cluster communication. * **Chores** * Update process now applies the new network policy as part of Flux Operator deployments. <!-- end of auto-generated comment: release notes by coderabbit.ai -->