109 lines
2.1 KiB
YAML
109 lines
2.1 KiB
YAML
|
apiVersion: cilium.io/v2
|
||
|
|
kind: CiliumNetworkPolicy
|
||
|
|
metadata:
|
||
|
|
name: canonical-routed-ranges
|
||
|
|
namespace: default
|
||
|
|
spec:
|
||
|
|
endpointSelector: {}
|
||
|
|
ingress:
|
||
|
|
- fromCIDR:
|
||
|
|
- 10.115.187.218/24
|
||
|
|
- 10.63.81.107/24
|
||
|
|
- 10.162.8.60/24
|
||
|
|
---
|
||
|
|
apiVersion: cilium.io/v2
|
||
|
|
kind: CiliumNetworkPolicy
|
||
|
|
metadata:
|
||
|
|
name: specific-private-peers
|
||
|
|
namespace: default
|
||
|
|
spec:
|
||
|
|
endpointSelector: {}
|
||
|
|
ingress:
|
||
|
|
- fromCIDR:
|
||
|
|
- 10.77.102.91/32
|
||
|
|
- 10.212.111.120/32
|
||
|
|
egress:
|
||
|
|
- toCIDRSet:
|
||
|
|
- cidr: 10.90.141.119/24
|
||
|
|
except:
|
||
|
|
- 10.66.127.81/32
|
||
|
|
---
|
||
|
|
apiVersion: cilium.io/v2
|
||
|
|
kind: CiliumClusterwideNetworkPolicy
|
||
|
|
metadata:
|
||
|
|
name: canonical-specs
|
||
|
|
spec:
|
||
|
|
specs:
|
||
|
|
- nodeSelector: {}
|
||
|
|
egress:
|
||
|
|
- toCIDR:
|
||
|
|
- 1.1.1.1/32
|
||
|
|
- nodeSelector: {}
|
||
|
|
ingress:
|
||
|
|
- fromCIDRSet:
|
||
|
|
- cidr: 10.63.81.107/24
|
||
|
|
except:
|
||
|
|
- 10.111.126.149/25
|
||
|
|
---
|
||
|
|
apiVersion: cilium.io/v2
|
||
|
|
kind: CiliumNetworkPolicy
|
||
|
|
metadata:
|
||
|
|
name: noncanonical-range
|
||
|
|
namespace: default
|
||
|
|
spec:
|
||
|
|
endpointSelector: {}
|
||
|
|
ingress:
|
||
|
|
- fromCIDR:
|
||
|
|
- 10.77.102.91/24
|
||
|
|
---
|
||
|
|
apiVersion: cilium.io/v2
|
||
|
|
kind: CiliumNetworkPolicy
|
||
|
|
metadata:
|
||
|
|
name: redundant-range
|
||
|
|
namespace: default
|
||
|
|
spec:
|
||
|
|
endpointSelector: {}
|
||
|
|
egress:
|
||
|
|
- toCIDR:
|
||
|
|
- 10.63.81.107/24
|
||
|
|
- 10.77.102.91/32
|
||
|
|
---
|
||
|
|
apiVersion: cilium.io/v2
|
||
|
|
kind: CiliumNetworkPolicy
|
||
|
|
metadata:
|
||
|
|
name: generic-private-range
|
||
|
|
namespace: default
|
||
|
|
spec:
|
||
|
|
endpointSelector: {}
|
||
|
|
ingress:
|
||
|
|
- fromCIDR:
|
||
|
|
- 10.87.139.185/16
|
||
|
|
---
|
||
|
|
apiVersion: cilium.io/v2
|
||
|
|
kind: CiliumNetworkPolicy
|
||
|
|
metadata:
|
||
|
|
name: noncanonical-cidrset-exception
|
||
|
|
namespace: default
|
||
|
|
spec:
|
||
|
|
endpointSelector: {}
|
||
|
|
egress:
|
||
|
|
- toCIDRSet:
|
||
|
|
- cidr: 10.90.141.119/24
|
||
|
|
except:
|
||
|
|
- 10.66.127.81/28
|
||
|
|
---
|
||
|
|
apiVersion: cilium.io/v2
|
||
|
|
kind: CiliumNetworkPolicy
|
||
|
|
metadata:
|
||
|
|
name: dynamic-peer-groups
|
||
|
|
namespace: default
|
||
|
|
spec:
|
||
|
|
endpointSelector: {}
|
||
|
|
ingress:
|
||
|
|
- fromCIDRSet:
|
||
|
|
- cidrGroupRef: short
|
||
|
|
egress:
|
||
|
|
- toCIDRSet:
|
||
|
|
- cidrGroupRef: short
|
||
|
|
- cidrGroupSelector:
|
||
|
|
matchLabels: {owner: short}
|