tegwick
994d11c869
Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a13eab-1e6a-7b33-9c37-372e90ada3a2
132 lines
3.2 KiB
JSON
132 lines
3.2 KiB
JSON
{
|
|
"schema": "netkingdom.identity-isolation.v1",
|
|
"status": "prepared_not_applied",
|
|
"kubeconfig": "/home/worsch/.kube/config",
|
|
"source_sha256": "88d1e13112a44c79571825af89d3fe5b01fa490cff2653badef4c62a45c844f1",
|
|
"policies": [
|
|
{
|
|
"namespace": "sso",
|
|
"name": "allow-egress-dns",
|
|
"uid": "d2a1bd49-7035-437b-9b8e-e9e66b203365",
|
|
"patch": [
|
|
{
|
|
"op": "test",
|
|
"path": "/metadata/uid",
|
|
"value": "d2a1bd49-7035-437b-9b8e-e9e66b203365"
|
|
},
|
|
{
|
|
"op": "test",
|
|
"path": "/metadata/resourceVersion",
|
|
"value": "3623833"
|
|
},
|
|
{
|
|
"op": "test",
|
|
"path": "/spec",
|
|
"value": {
|
|
"egress": [
|
|
{
|
|
"ports": [
|
|
{
|
|
"port": 53,
|
|
"protocol": "UDP"
|
|
},
|
|
{
|
|
"port": 53,
|
|
"protocol": "TCP"
|
|
}
|
|
],
|
|
"to": [
|
|
{
|
|
"namespaceSelector": {
|
|
"matchLabels": {
|
|
"kubernetes.io/metadata.name": "kube-system"
|
|
}
|
|
}
|
|
}
|
|
]
|
|
}
|
|
],
|
|
"podSelector": {},
|
|
"policyTypes": [
|
|
"Egress"
|
|
]
|
|
}
|
|
},
|
|
{
|
|
"op": "replace",
|
|
"path": "/spec/podSelector",
|
|
"value": {
|
|
"matchExpressions": [
|
|
{
|
|
"key": "net-kingdom/capture",
|
|
"operator": "DoesNotExist"
|
|
}
|
|
]
|
|
}
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"namespace": "mfa",
|
|
"name": "allow-egress-dns",
|
|
"uid": "1d23ed08-bb6f-4959-b72e-3f03af40f136",
|
|
"patch": [
|
|
{
|
|
"op": "test",
|
|
"path": "/metadata/uid",
|
|
"value": "1d23ed08-bb6f-4959-b72e-3f03af40f136"
|
|
},
|
|
{
|
|
"op": "test",
|
|
"path": "/metadata/resourceVersion",
|
|
"value": "3623822"
|
|
},
|
|
{
|
|
"op": "test",
|
|
"path": "/spec",
|
|
"value": {
|
|
"egress": [
|
|
{
|
|
"ports": [
|
|
{
|
|
"port": 53,
|
|
"protocol": "UDP"
|
|
},
|
|
{
|
|
"port": 53,
|
|
"protocol": "TCP"
|
|
}
|
|
],
|
|
"to": [
|
|
{
|
|
"namespaceSelector": {
|
|
"matchLabels": {
|
|
"kubernetes.io/metadata.name": "kube-system"
|
|
}
|
|
}
|
|
}
|
|
]
|
|
}
|
|
],
|
|
"podSelector": {},
|
|
"policyTypes": [
|
|
"Egress"
|
|
]
|
|
}
|
|
},
|
|
{
|
|
"op": "replace",
|
|
"path": "/spec/podSelector",
|
|
"value": {
|
|
"matchExpressions": [
|
|
{
|
|
"key": "net-kingdom/capture",
|
|
"operator": "DoesNotExist"
|
|
}
|
|
]
|
|
}
|
|
}
|
|
]
|
|
}
|
|
]
|
|
}
|