From c1b4f15eb75e609adff9a3f8fa516eba320aa3ac Mon Sep 17 00:00:00 2001 From: JJGadgets Date: Fri, 15 Dec 2023 05:29:55 +0800 Subject: [PATCH] fix(k8sgw): Tailscale netpols --- kube/deploy/core/dns/internal/k8s-gateway/app/netpol.yaml | 3 +++ 1 file changed, 3 insertions(+) diff --git a/kube/deploy/core/dns/internal/k8s-gateway/app/netpol.yaml b/kube/deploy/core/dns/internal/k8s-gateway/app/netpol.yaml index df50295e..6d2abe5d 100644 --- a/kube/deploy/core/dns/internal/k8s-gateway/app/netpol.yaml +++ b/kube/deploy/core/dns/internal/k8s-gateway/app/netpol.yaml @@ -24,6 +24,9 @@ spec: - ports: - port: "53" - port: "1053" + - fromEndpoints: + - matchLabels: + io.kubernetes.pod.namespace: "tailscale" egress: - toCIDRSet: - cidr: "${IP_ROUTER_VLAN_K8S}/32"