ce7cb702218693d08ea6d83464d2457c9250027c

services/short/k8s/control/policy.yaml

@@ -0,0 +1,43 @@
+apiVersion: cilium.io/v2
+kind: CiliumNetworkPolicy
+metadata:
+  name: controller
+  namespace: short
+spec:
+  endpointSelector:
+    matchLabels:
+      app.kubernetes.io/name: controller
+  egress:
+  - toEndpoints:
+    - matchLabels:
+        k8s:io.kubernetes.pod.namespace: kube-system
+        k8s:k8s-app: kube-dns
+    toPorts:
+    - ports:
+      - port: '53'
+        protocol: UDP
+      - port: '53'
+        protocol: TCP
+      rules:
+        dns:
+        - matchPattern: '*'
+  - toEndpoints:
+    - matchLabels:
+        k8s:io.kubernetes.pod.namespace: vault
+        app.kubernetes.io/name: vault
+    toPorts:
+    - ports:
+      - port: '8200'
+        protocol: TCP
+  - toCIDR:
+    - 10.212.111.120/32
+    toPorts:
+    - ports:
+      - port: '8443'
+        protocol: TCP
+  - toFQDNs:
+    - matchPattern: iaas.*.oraclecloud.com
+    toPorts:
+    - ports:
+      - port: '443'
+        protocol: TCP