now also supporting linkerd

and some cleanup
2025-01-02 19:30:31 +01:00
parent c522f16d64
commit 01700876cf
4 changed files with 41 additions and 7 deletions
@@ -1,6 +1,37 @@
+{{- if not .Open }}
 ---
-####################################################################################
-# LINKERD NETPOL TBD
-####################################################################################
-
-
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+  name: allow-linkerd # required for OCSP
+  namespace: {{ .Name }}
+spec:
+  podSelector: {}
+  policyTypes:
+    - Ingress
+    - Egress
+  ingress:
+    - from:
+        - namespaceSelector:
+            matchExpressions:
+              - key: kubernetes.io/metadata.name
+                operator: In
+                values:
+                  - linkerd-viz
+    - ports:
+        - port: linkerd-admin
+      from:
+        - namespaceSelector:
+            matchLabels:
+              kubernetes.io/metadata.name: monitoring
+          # podSelector prometheus
+  egress:
+    - to:
+        - namespaceSelector:
+            matchExpressions:
+              - key: kubernetes.io/metadata.name
+                operator: In
+                values:
+                  - linkerd
+                  - linkerd-jaeger
+  {{- end }}