Add NetworkPolicies

2020-05-01 01:32:18 +02:00 · 2020-05-01 01:32:18 +02:00 · 63318b11b9
commit 63318b11b9
parent 07283a2243
4 changed files with 39 additions and 5 deletions
--- a/files/NetworkPolicies/allow-from-namespaces.yaml
+++ b/files/NetworkPolicies/allow-from-namespaces.yaml
@ -0,0 +1,19 @@
+apiVersion: networking.k8s.io/v1
+kind: NetworkPolicy
+metadata:
+  name: allow-from-namespaces
+  namespace: kubernetes-dashboard
+spec:
+  podSelector: {}
+  ingress:
+    - from:
+      - podSelector: {}
+    - from:
+      - namespaceSelector:
+          matchLabels:
+            namespace: tools
+        podSelector:
+          matchLabels:
+            app: traefik
+  policyTypes:
+  - Ingress
--- a/files/NetworkPolicies/default-deny-all.yaml
+++ b/files/NetworkPolicies/default-deny-all.yaml
@ -0,0 +1,10 @@
+apiVersion: networking.k8s.io/v1
+kind: NetworkPolicy
+metadata:
+  name: default-deny-all
+  namespace: kubernetes-dashboard
+spec:
+  podSelector: {}
+  policyTypes:
+  - Ingress
+  - Egress