forked from extern/trmm-awesome
63 lines
1.2 KiB
YAML
63 lines
1.2 KiB
YAML
apiVersion: networking.k8s.io/v1
|
|
kind: NetworkPolicy
|
|
metadata:
|
|
name: proxy
|
|
namespace: tacticalrmm
|
|
spec:
|
|
ingress:
|
|
- {}
|
|
podSelector:
|
|
matchLabels:
|
|
network/proxy: "true"
|
|
---
|
|
apiVersion: networking.k8s.io/v1
|
|
kind: NetworkPolicy
|
|
metadata:
|
|
name: api-db
|
|
namespace: tacticalrmm
|
|
spec:
|
|
ingress:
|
|
- from:
|
|
- podSelector:
|
|
matchLabels:
|
|
network/api-db: "true"
|
|
- podSelector:
|
|
matchLabels:
|
|
network/proxy: "true"
|
|
podSelector:
|
|
matchLabels:
|
|
network/api-db: "true"
|
|
---
|
|
apiVersion: networking.k8s.io/v1
|
|
kind: NetworkPolicy
|
|
metadata:
|
|
name: mesh-db
|
|
namespace: tacticalrmm
|
|
spec:
|
|
ingress:
|
|
- from:
|
|
- podSelector:
|
|
matchLabels:
|
|
network/mesh-db: "true"
|
|
- podSelector:
|
|
matchLabels:
|
|
network/proxy: "true"
|
|
podSelector:
|
|
matchLabels:
|
|
network/mesh-db: "true"
|
|
---
|
|
apiVersion: networking.k8s.io/v1
|
|
kind: NetworkPolicy
|
|
metadata:
|
|
name: redis
|
|
namespace: tacticalrmm
|
|
spec:
|
|
ingress:
|
|
- from:
|
|
- podSelector:
|
|
matchLabels:
|
|
network/redis: "true"
|
|
podSelector:
|
|
matchLabels:
|
|
network/redis: "true"
|