provisioning-code/k8s/network-policy.yaml

85 lines
1.5 KiB
YAML

apiVersion: networking.k8s.io/v1
kind: NetworkPolicy
metadata:
labels:
component: provisioning-platform
name: provisioning-network-policy
namespace: provisioning
spec:
egress:
- ports:
- port: 53
protocol: UDP
- port: 53
protocol: TCP
to:
- namespaceSelector: {}
- ports:
- port: 5432
protocol: TCP
- port: 8000
protocol: TCP
- port: 9090
protocol: TCP
- port: 8080
protocol: TCP
- port: 8888
protocol: TCP
to:
- podSelector: {}
- ports:
- port: 443
protocol: TCP
- port: 80
protocol: TCP
to:
- namespaceSelector: {}
ingress:
- from:
- namespaceSelector:
matchLabels:
name: ingress-nginx
ports:
- port: 8080
protocol: TCP
- port: 9090
protocol: TCP
- port: 8888
protocol: TCP
- from:
- podSelector: {}
ports:
- port: 9090
protocol: TCP
- port: 8080
protocol: TCP
- port: 8888
protocol: TCP
- port: 9091
protocol: TCP
- port: 8081
protocol: TCP
- port: 8889
protocol: TCP
- from:
- namespaceSelector:
matchLabels:
name: monitoring
ports:
- port: 9091
protocol: TCP
- port: 8081
protocol: TCP
- port: 8889
protocol: TCP
- from:
- namespaceSelector: {}
ports:
- port: 53
protocol: UDP
- port: 53
protocol: TCP
podSelector: {}
policyTypes:
- Ingress
- Egress