276 lines
7.2 KiB
YAML
276 lines
7.2 KiB
YAML
|
---
|
||
|
|
apiVersion: cilium.io/v2
|
||
|
|
kind: CiliumNetworkPolicy
|
||
|
|
metadata:
|
||
|
|
name: quay
|
||
|
|
namespace: dragonfly
|
||
|
|
spec:
|
||
|
|
endpointSelector:
|
||
|
|
matchLabels:
|
||
|
|
app.kubernetes.io/name: dragonfly
|
||
|
|
app: quay
|
||
|
|
ingress:
|
||
|
|
- fromEndpoints:
|
||
|
|
- matchLabels:
|
||
|
|
k8s:io.kubernetes.pod.namespace: dragonfly
|
||
|
|
app.kubernetes.io/name: dragonfly
|
||
|
|
app: quay
|
||
|
|
toPorts:
|
||
|
|
- ports:
|
||
|
|
- port: "6379"
|
||
|
|
protocol: TCP
|
||
|
|
- port: "9999"
|
||
|
|
protocol: TCP
|
||
|
|
- fromEndpoints:
|
||
|
|
- matchLabels:
|
||
|
|
k8s:io.kubernetes.pod.namespace: dragonfly
|
||
|
|
app.kubernetes.io/name: dragonfly-operator
|
||
|
|
app.kubernetes.io/instance: dragonfly-operator
|
||
|
|
toPorts:
|
||
|
|
- ports:
|
||
|
|
- port: "6379"
|
||
|
|
protocol: TCP
|
||
|
|
- port: "9999"
|
||
|
|
protocol: TCP
|
||
|
|
- fromEndpoints:
|
||
|
|
- matchLabels:
|
||
|
|
k8s:io.kubernetes.pod.namespace: quay
|
||
|
|
toPorts:
|
||
|
|
- ports:
|
||
|
|
- port: "6379"
|
||
|
|
protocol: TCP
|
||
|
|
egress:
|
||
|
|
- toEndpoints:
|
||
|
|
- matchLabels:
|
||
|
|
k8s:io.kubernetes.pod.namespace: dragonfly
|
||
|
|
app.kubernetes.io/name: dragonfly
|
||
|
|
app: quay
|
||
|
|
toPorts:
|
||
|
|
- ports:
|
||
|
|
- port: "6379"
|
||
|
|
protocol: TCP
|
||
|
|
- port: "9999"
|
||
|
|
protocol: TCP
|
||
|
|
- toEndpoints:
|
||
|
|
- matchLabels:
|
||
|
|
k8s:io.kubernetes.pod.namespace: kube-system
|
||
|
|
k8s-app: kube-dns
|
||
|
|
toPorts:
|
||
|
|
- ports:
|
||
|
|
- port: "53"
|
||
|
|
protocol: UDP
|
||
|
|
- port: "53"
|
||
|
|
protocol: TCP
|
||
|
|
---
|
||
|
|
apiVersion: cilium.io/v2
|
||
|
|
kind: CiliumNetworkPolicy
|
||
|
|
metadata:
|
||
|
|
name: stalwart
|
||
|
|
namespace: dragonfly
|
||
|
|
spec:
|
||
|
|
endpointSelector:
|
||
|
|
matchLabels:
|
||
|
|
app.kubernetes.io/name: dragonfly
|
||
|
|
app: stalwart
|
||
|
|
ingress:
|
||
|
|
- fromEndpoints:
|
||
|
|
- matchLabels:
|
||
|
|
k8s:io.kubernetes.pod.namespace: dragonfly
|
||
|
|
app.kubernetes.io/name: dragonfly
|
||
|
|
app: stalwart
|
||
|
|
toPorts:
|
||
|
|
- ports:
|
||
|
|
- port: "6379"
|
||
|
|
protocol: TCP
|
||
|
|
- port: "9999"
|
||
|
|
protocol: TCP
|
||
|
|
- fromEndpoints:
|
||
|
|
- matchLabels:
|
||
|
|
k8s:io.kubernetes.pod.namespace: dragonfly
|
||
|
|
app.kubernetes.io/name: dragonfly-operator
|
||
|
|
app.kubernetes.io/instance: dragonfly-operator
|
||
|
|
toPorts:
|
||
|
|
- ports:
|
||
|
|
- port: "6379"
|
||
|
|
protocol: TCP
|
||
|
|
- port: "9999"
|
||
|
|
protocol: TCP
|
||
|
|
- fromEndpoints:
|
||
|
|
- matchExpressions:
|
||
|
|
- key: k8s:io.kubernetes.pod.namespace
|
||
|
|
operator: In
|
||
|
|
values:
|
||
|
|
- stalwart
|
||
|
|
- key: app.kubernetes.io/name
|
||
|
|
operator: In
|
||
|
|
values:
|
||
|
|
- stalwart
|
||
|
|
- stalwart-bootstrap
|
||
|
|
- key: app.kubernetes.io/instance
|
||
|
|
operator: In
|
||
|
|
values:
|
||
|
|
- stalwart
|
||
|
|
toPorts:
|
||
|
|
- ports:
|
||
|
|
- port: "6379"
|
||
|
|
protocol: TCP
|
||
|
|
egress:
|
||
|
|
- toEndpoints:
|
||
|
|
- matchLabels:
|
||
|
|
k8s:io.kubernetes.pod.namespace: dragonfly
|
||
|
|
app.kubernetes.io/name: dragonfly
|
||
|
|
app: stalwart
|
||
|
|
toPorts:
|
||
|
|
- ports:
|
||
|
|
- port: "6379"
|
||
|
|
protocol: TCP
|
||
|
|
- port: "9999"
|
||
|
|
protocol: TCP
|
||
|
|
- toEndpoints:
|
||
|
|
- matchLabels:
|
||
|
|
k8s:io.kubernetes.pod.namespace: kube-system
|
||
|
|
k8s-app: kube-dns
|
||
|
|
toPorts:
|
||
|
|
- ports:
|
||
|
|
- port: "53"
|
||
|
|
protocol: UDP
|
||
|
|
- port: "53"
|
||
|
|
protocol: TCP
|
||
|
|
---
|
||
|
|
apiVersion: cilium.io/v2
|
||
|
|
kind: CiliumNetworkPolicy
|
||
|
|
metadata:
|
||
|
|
name: forgejo-public
|
||
|
|
namespace: dragonfly
|
||
|
|
spec:
|
||
|
|
endpointSelector:
|
||
|
|
matchLabels:
|
||
|
|
app.kubernetes.io/name: dragonfly
|
||
|
|
app: forgejo-public
|
||
|
|
ingress:
|
||
|
|
- fromEndpoints:
|
||
|
|
- matchLabels:
|
||
|
|
k8s:io.kubernetes.pod.namespace: dragonfly
|
||
|
|
app.kubernetes.io/name: dragonfly
|
||
|
|
app: forgejo-public
|
||
|
|
toPorts:
|
||
|
|
- ports:
|
||
|
|
- port: "6379"
|
||
|
|
protocol: TCP
|
||
|
|
- port: "9999"
|
||
|
|
protocol: TCP
|
||
|
|
- fromEndpoints:
|
||
|
|
- matchLabels:
|
||
|
|
k8s:io.kubernetes.pod.namespace: dragonfly
|
||
|
|
app.kubernetes.io/name: dragonfly-operator
|
||
|
|
app.kubernetes.io/instance: dragonfly-operator
|
||
|
|
toPorts:
|
||
|
|
- ports:
|
||
|
|
- port: "6379"
|
||
|
|
protocol: TCP
|
||
|
|
- port: "9999"
|
||
|
|
protocol: TCP
|
||
|
|
- fromEndpoints:
|
||
|
|
- matchExpressions:
|
||
|
|
- key: k8s:io.kubernetes.pod.namespace
|
||
|
|
operator: In
|
||
|
|
values:
|
||
|
|
- forgejo-public
|
||
|
|
- key: app.kubernetes.io/name
|
||
|
|
operator: In
|
||
|
|
values:
|
||
|
|
- forgejo
|
||
|
|
- key: app.kubernetes.io/instance
|
||
|
|
operator: In
|
||
|
|
values:
|
||
|
|
- forge-code
|
||
|
|
- forge-git
|
||
|
|
toPorts:
|
||
|
|
- ports:
|
||
|
|
- port: "6379"
|
||
|
|
protocol: TCP
|
||
|
|
egress:
|
||
|
|
- toEndpoints:
|
||
|
|
- matchLabels:
|
||
|
|
k8s:io.kubernetes.pod.namespace: dragonfly
|
||
|
|
app.kubernetes.io/name: dragonfly
|
||
|
|
app: forgejo-public
|
||
|
|
toPorts:
|
||
|
|
- ports:
|
||
|
|
- port: "6379"
|
||
|
|
protocol: TCP
|
||
|
|
- port: "9999"
|
||
|
|
protocol: TCP
|
||
|
|
- toEndpoints:
|
||
|
|
- matchLabels:
|
||
|
|
k8s:io.kubernetes.pod.namespace: kube-system
|
||
|
|
k8s-app: kube-dns
|
||
|
|
toPorts:
|
||
|
|
- ports:
|
||
|
|
- port: "53"
|
||
|
|
protocol: UDP
|
||
|
|
- port: "53"
|
||
|
|
protocol: TCP
|
||
|
|
---
|
||
|
|
apiVersion: cilium.io/v2
|
||
|
|
kind: CiliumNetworkPolicy
|
||
|
|
metadata:
|
||
|
|
name: forgejo
|
||
|
|
namespace: dragonfly
|
||
|
|
spec:
|
||
|
|
endpointSelector:
|
||
|
|
matchLabels:
|
||
|
|
app.kubernetes.io/name: dragonfly
|
||
|
|
app: forgejo
|
||
|
|
ingress:
|
||
|
|
- fromEndpoints:
|
||
|
|
- matchLabels:
|
||
|
|
k8s:io.kubernetes.pod.namespace: dragonfly
|
||
|
|
app.kubernetes.io/name: dragonfly
|
||
|
|
app: forgejo
|
||
|
|
toPorts:
|
||
|
|
- ports:
|
||
|
|
- port: "6379"
|
||
|
|
protocol: TCP
|
||
|
|
- port: "9999"
|
||
|
|
protocol: TCP
|
||
|
|
- fromEndpoints:
|
||
|
|
- matchLabels:
|
||
|
|
k8s:io.kubernetes.pod.namespace: dragonfly
|
||
|
|
app.kubernetes.io/name: dragonfly-operator
|
||
|
|
app.kubernetes.io/instance: dragonfly-operator
|
||
|
|
toPorts:
|
||
|
|
- ports:
|
||
|
|
- port: "6379"
|
||
|
|
protocol: TCP
|
||
|
|
- port: "9999"
|
||
|
|
protocol: TCP
|
||
|
|
- fromEndpoints:
|
||
|
|
- matchLabels:
|
||
|
|
k8s:io.kubernetes.pod.namespace: forgejo
|
||
|
|
toPorts:
|
||
|
|
- ports:
|
||
|
|
- port: "6379"
|
||
|
|
protocol: TCP
|
||
|
|
egress:
|
||
|
|
- toEndpoints:
|
||
|
|
- matchLabels:
|
||
|
|
k8s:io.kubernetes.pod.namespace: dragonfly
|
||
|
|
app.kubernetes.io/name: dragonfly
|
||
|
|
app: forgejo
|
||
|
|
toPorts:
|
||
|
|
- ports:
|
||
|
|
- port: "6379"
|
||
|
|
protocol: TCP
|
||
|
|
- port: "9999"
|
||
|
|
protocol: TCP
|
||
|
|
- toEndpoints:
|
||
|
|
- matchLabels:
|
||
|
|
k8s:io.kubernetes.pod.namespace: kube-system
|
||
|
|
k8s-app: kube-dns
|
||
|
|
toPorts:
|
||
|
|
- ports:
|
||
|
|
- port: "53"
|
||
|
|
protocol: UDP
|
||
|
|
- port: "53"
|
||
|
|
protocol: TCP
|