fix(external-secrets): netpols

2026-03-21 08:39:42 +00:00 · 2023-12-19 21:38:38 +08:00
parent ce108606a7
commit d2467bb4d8
1 changed files with 6 additions and 6 deletions
--- a/kube/deploy/core/secrets/external-secrets/app/hr.yaml
+++ b/kube/deploy/core/secrets/external-secrets/app/hr.yaml
@@ -15,8 +15,7 @@ spec:
        namespace: flux-system
  values:
    installCRDs: true
-    podLabels:
-      # netpols
+    podLabels: # netpols
      egress.home.arpa/apiserver: "allow"
      egress.home.arpa/world-https: "allow"
    # scheduling
@@ -30,10 +29,9 @@ spec:
          matchLabels:
            app.kubernetes.io/name: *app
    certController:
-      podLabels:
-        # netpols
+      podLabels: # netpols
        egress.home.arpa/apiserver: "allow"
-      # monitoring
+    # monitoring
      serviceMonitor:
        enabled: true
        interval: 1m
@@ -43,4 +41,6 @@ spec:
    webhook:
      serviceMonitor:
        enabled: true
-        interval: 1m
+        interval: 1m
+      podLabels: # netpols
+        ingress.home.arpa/apiserver: "allow"