trmm-awesome/kubernetes/network-policy.yaml
2022-01-07 13:19:23 -08:00

63 lines
1.2 KiB
YAML

apiVersion: networking.k8s.io/v1
kind: NetworkPolicy
metadata:
name: proxy
namespace: tacticalrmm
spec:
ingress:
- {}
podSelector:
matchLabels:
network/proxy: "true"
---
apiVersion: networking.k8s.io/v1
kind: NetworkPolicy
metadata:
name: api-db
namespace: tacticalrmm
spec:
ingress:
- from:
- podSelector:
matchLabels:
network/api-db: "true"
- podSelector:
matchLabels:
network/proxy: "true"
podSelector:
matchLabels:
network/api-db: "true"
---
apiVersion: networking.k8s.io/v1
kind: NetworkPolicy
metadata:
name: mesh-db
namespace: tacticalrmm
spec:
ingress:
- from:
- podSelector:
matchLabels:
network/mesh-db: "true"
- podSelector:
matchLabels:
network/proxy: "true"
podSelector:
matchLabels:
network/mesh-db: "true"
---
apiVersion: networking.k8s.io/v1
kind: NetworkPolicy
metadata:
name: redis
namespace: tacticalrmm
spec:
ingress:
- from:
- podSelector:
matchLabels:
network/redis: "true"
podSelector:
matchLabels:
network/redis: "true"