coulomb/net-kingdom
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Keep provisioner DNS egress in network policy
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details

Browse source
This commit is contained in:
tegwick 2026-07-28 17:51:13 +02:00
parent 816c5c3773
commit d2c59fbf5e
1 changed files with 4 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

8
sso-mfa/k8s/identity-provisioner/deployment.yaml
View file

@ -86,6 +86,10 @@ spec:
- podSelector: - podSelector:
matchLabels: {app.kubernetes.io/name: lldap} matchLabels: {app.kubernetes.io/name: lldap}
ports: [{protocol: TCP, port: 17170}] ports: [{protocol: TCP, port: 17170}]
- to:
- namespaceSelector:
matchLabels: {kubernetes.io/metadata.name: kube-system}
ports: [{protocol: UDP, port: 53}, {protocol: TCP, port: 53}]
--- ---
apiVersion: networking.k8s.io/v1 apiVersion: networking.k8s.io/v1
kind: Ingress kind: Ingress
@ -112,10 +116,6 @@ spec:
tls: tls:
- hosts: [kc.coulomb.social] - hosts: [kc.coulomb.social]
secretName: kc-tls secretName: kc-tls
- to:
- namespaceSelector:
matchLabels: {kubernetes.io/metadata.name: kube-system}
ports: [{protocol: UDP, port: 53}, {protocol: TCP, port: 53}]
--- ---
apiVersion: networking.k8s.io/v1 apiVersion: networking.k8s.io/v1
kind: NetworkPolicy kind: NetworkPolicy