first commit

2025-01-02 11:37:20 +01:00
commit 4d56d8ea21
12 changed files with 475 additions and 0 deletions
@@ -0,0 +1,15 @@
+kind: CiliumNetworkPolicy
+apiVersion: cilium.io/v2
+metadata:
+  name: {{.name}}
+  namespace: {{.namespace}}
+spec:
+  endpointSelector:
+    {{ .selector }}
+  egress:
+  - toEntities:
+    - kube-apiserver
+  - toPorts:
+    - ports:
+      - port: "6443"
+        protocol: TCP
@@ -0,0 +1,13 @@
+kind: CiliumNetworkPolicy
+apiVersion: cilium.io/v2
+metadata:
+  name: {{.name}}
+  namespace: {{.namespace}}
+spec:
+  endpointSelector:
+    {{ .selector }}
+  ingress:
+  - fromEntities:
+    - kube-apiserver
+    # See https://github.com/cilium/cilium/issues/35401
+    - remote-node
@@ -0,0 +1,14 @@
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+  name: "{{.name}}"
+  namespace: "{{.namespace}}"
+spec:
+  policyTypes:
+  - Egress
+  podSelector:
+    {{.selector}}
+  egress:
+    {{- range $from := .from }}
+    - {{ $from | nindent 4 }}
+    {{- end }}
@@ -0,0 +1,14 @@
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+  name: "{{.name}}"
+  namespace: "{{.namespace}}"
+spec:
+  policyTypes:
+    - Ingress
+  podSelector:
+    {{.selector}}
+  ingress:
+    {{- range $from := .from }}
+    - {{ $from | nindent 4 }}
+    {{- end }}