From 911dd40858e440b6ed0c0e969d7f3df0b33438cc Mon Sep 17 00:00:00 2001
From: Erik Brakkee <Erik.Brakkee@vanderlande.com>
Date: Tue, 10 Sep 2024 19:43:12 +0200
Subject: [PATCH] added network policy preventing egress of converge
---
kubernetes/converge/templates/networkpolicy.yaml | 14 ++++++++++++++
1 file changed, 14 insertions(+)
create mode 100644 kubernetes/converge/templates/networkpolicy.yaml
diff --git a/kubernetes/converge/templates/networkpolicy.yaml b/kubernetes/converge/templates/networkpolicy.yaml
new file mode 100644
index 0000000..bf06a07
--- /dev/null
+++ b/kubernetes/converge/templates/networkpolicy.yaml
@@ -0,0 +1,14 @@
+apiVersion: networking.k8s.io/v1
+kind: NetworkPolicy
+metadata:
+ name: {{.Release.Name}}-converge
+spec:
+ podSelector:
+ matchLabels:
+ app: "converge"
+ policyTypes:
+ - Ingress
+ - Egress
+ ingress:
+ - ports:
+ - port: http
\ No newline at end of file