28 lines
757 B
YAML
28 lines
757 B
YAML
|
apiVersion: networking.k8s.io/v1
|
||
|
|
kind: NetworkPolicy
|
||
|
|
metadata:
|
||
|
|
name: vergabe-oidc-issuer-egress
|
||
|
|
namespace: vergabe-demo-company
|
||
|
|
spec:
|
||
|
|
podSelector:
|
||
|
|
matchLabels:
|
||
|
|
app.kubernetes.io/name: vergabe-teilnahme
|
||
|
|
app.kubernetes.io/instance: vergabe-teilnahme
|
||
|
|
policyTypes: [Egress]
|
||
|
|
egress:
|
||
|
|
- to:
|
||
|
|
- ipBlock:
|
||
|
|
cidr: 92.205.62.239/32
|
||
|
|
ports:
|
||
|
|
- {protocol: TCP, port: 443}
|
||
|
|
# The same public TLS route after K3s translates the node destination.
|
||
|
|
- to:
|
||
|
|
- namespaceSelector:
|
||
|
|
matchLabels:
|
||
|
|
kubernetes.io/metadata.name: kube-system
|
||
|
|
podSelector:
|
||
|
|
matchLabels:
|
||
|
|
app.kubernetes.io/name: traefik
|
||
|
|
ports:
|
||
|
|
- {protocol: TCP, port: 8443}
|