39 lines
1.1 KiB
YAML
39 lines
1.1 KiB
YAML
apiVersion: cilium.io/v2
|
|
kind: CiliumNetworkPolicy
|
|
metadata: {name: canary, namespace: short}
|
|
spec:
|
|
endpointSelector:
|
|
matchLabels: {app.kubernetes.io/name: short-canary, app.kubernetes.io/instance: short}
|
|
ingress:
|
|
- fromEntities: [host, ingress]
|
|
toPorts:
|
|
- ports: [{port: "8080", protocol: TCP}]
|
|
---
|
|
apiVersion: cilium.io/v2
|
|
kind: CiliumClusterwideNetworkPolicy
|
|
metadata: {name: short-canary-egress}
|
|
spec:
|
|
endpointSelector:
|
|
matchLabels: {"reserved:ingress": ""}
|
|
egress:
|
|
- toEndpoints:
|
|
- matchLabels:
|
|
k8s:io.kubernetes.pod.namespace: short
|
|
app.kubernetes.io/name: short-canary
|
|
app.kubernetes.io/instance: short
|
|
toPorts:
|
|
- ports: [{port: "8080", protocol: TCP}]
|
|
---
|
|
apiVersion: cilium.io/v2
|
|
kind: CiliumClusterwideNetworkPolicy
|
|
metadata: {name: short-canary-replies}
|
|
spec:
|
|
nodeSelector: {}
|
|
ingress:
|
|
- fromEndpoints:
|
|
- matchLabels:
|
|
k8s:io.kubernetes.pod.namespace: short
|
|
app.kubernetes.io/name: short-canary
|
|
app.kubernetes.io/instance: short
|
|
toPorts:
|
|
- ports: [{port: "32768", endPort: 60999, protocol: TCP}]
|