fix(external-secrets): netpols

2026-03-20 13:39:36 +00:00 · 2023-08-12 23:20:10 +08:00
parent fe9bdc1ae6
commit f73bb28962
1 changed files with 8 additions and 5 deletions
--- a/kube/deploy/core/secrets/external-secrets/app/hr.yaml
+++ b/kube/deploy/core/secrets/external-secrets/app/hr.yaml
@@ -29,15 +29,18 @@ spec:
        labelSelector:
          matchLabels:
            app.kubernetes.io/name: *app
-    # monitoring
+    certController:
+      podLabels:
+        # netpols
+        egress.home.arpa/apiserver: "allow"
+      # monitoring
+      serviceMonitor:
+        enabled: true
+        interval: 1m
    serviceMonitor:
      enabled: true
      interval: 1m
    webhook:
-      serviceMonitor:
-        enabled: true
-        interval: 1m
-    certController:
      serviceMonitor:
        enabled: true
        interval: 1m