tegwick
fd5e57bc99
Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a092fe-13b1-7f12-ac74-7d258af4d79c
27 lines
757 B
YAML
27 lines
757 B
YAML
apiVersion: networking.k8s.io/v1
|
|
kind: NetworkPolicy
|
|
metadata:
|
|
name: vergabe-oidc-issuer-egress
|
|
namespace: vergabe-demo-company
|
|
spec:
|
|
podSelector:
|
|
matchLabels:
|
|
app.kubernetes.io/name: vergabe-teilnahme
|
|
app.kubernetes.io/instance: vergabe-teilnahme
|
|
policyTypes: [Egress]
|
|
egress:
|
|
- to:
|
|
- ipBlock:
|
|
cidr: 92.205.62.239/32
|
|
ports:
|
|
- {protocol: TCP, port: 443}
|
|
# The same public TLS route after K3s translates the node destination.
|
|
- to:
|
|
- namespaceSelector:
|
|
matchLabels:
|
|
kubernetes.io/metadata.name: kube-system
|
|
podSelector:
|
|
matchLabels:
|
|
app.kubernetes.io/name: traefik
|
|
ports:
|
|
- {protocol: TCP, port: 8443}
|