trmm-awesome/kubernetes/network-policy.yaml
2022-01-02 23:40:25 -08:00

62 lines
1.1 KiB
YAML

apiVersion: networking.k8s.io/v1
kind: NetworkPolicy
metadata:
name: proxy
spec:
ingress:
- {}
podSelector:
matchLabels:
network/proxy: "true"
---
apiVersion: networking.k8s.io/v1
kind: NetworkPolicy
metadata:
name: api-db
namespace: tacticalrmm
spec:
ingress:
- from:
- podSelector:
matchLabels:
network/api-db: "true"
- podSelector:
matchLabels:
network/proxy: "true"
podSelector:
matchLabels:
network/api-db: "true"
---
apiVersion: networking.k8s.io/v1
kind: NetworkPolicy
metadata:
name: mesh-db
namespace: tacticalrmm
spec:
ingress:
- from:
- podSelector:
matchLabels:
network/mesh-db: "true"
- podSelector:
matchLabels:
network/proxy: "true"
podSelector:
matchLabels:
network/mesh-db: "true"
---
apiVersion: networking.k8s.io/v1
kind: NetworkPolicy
metadata:
name: redis
namespace: tacticalrmm
spec:
ingress:
- from:
- podSelector:
matchLabels:
network/redis: "true"
podSelector:
matchLabels:
network/redis: "true"