fix(headscale): allow cloudflared ingress

2026-03-21 22:39:53 +00:00 · 2023-05-28 12:02:33 +08:00
parent 8be8d862df
commit cd7698a6e9
1 changed files with 16 additions and 0 deletions
--- a/kube/3-deploy/2-apps/headscale/app/netpol.yaml
+++ b/kube/3-deploy/2-apps/headscale/app/netpol.yaml
@@ -27,6 +27,22 @@ spec:
              protocol: TCP
            - port: "9090"
              protocol: UDP
+    # Cloudflare tunnel
+    - fromEndpoints:
+        - matchLabels:
+            io.kubernetes.pod.namespace: cloudflare
+            app.kubernetes.io/instance: cloudflared
+            app.kubernetes.io/name: cloudflared
+      toPorts:
+        - ports:
+            - port: "8080"
+              protocol: TCP
+            - port: "8080"
+              protocol: UDP
+            - port: "9090"
+              protocol: TCP
+            - port: "9090"
+              protocol: UDP
    # allow ingress
    - fromEntities:
        - world