forked from k-space/kube
wildduck: Add network policies for ZoneMTA and webmail
This commit is contained in:
parent
a0d48d4243
commit
efc76d7a10
@ -66,11 +66,11 @@ spec:
|
|||||||
replicas: 2
|
replicas: 2
|
||||||
selector:
|
selector:
|
||||||
matchLabels:
|
matchLabels:
|
||||||
app: webmail
|
app.kubernetes.io/name: webmail
|
||||||
template:
|
template:
|
||||||
metadata:
|
metadata:
|
||||||
labels:
|
labels:
|
||||||
app: webmail
|
app.kubernetes.io/name: webmail
|
||||||
spec:
|
spec:
|
||||||
containers:
|
containers:
|
||||||
- name: webmail
|
- name: webmail
|
||||||
@ -112,7 +112,7 @@ metadata:
|
|||||||
namespace: wildduck
|
namespace: wildduck
|
||||||
spec:
|
spec:
|
||||||
selector:
|
selector:
|
||||||
app: webmail
|
app.kubernetes.io/name: webmail
|
||||||
ports:
|
ports:
|
||||||
- protocol: TCP
|
- protocol: TCP
|
||||||
port: 80
|
port: 80
|
||||||
@ -154,3 +154,24 @@ spec:
|
|||||||
regex: ^https://webmail.k-space.ee/$
|
regex: ^https://webmail.k-space.ee/$
|
||||||
replacement: https://webmail.k-space.ee/webmail/
|
replacement: https://webmail.k-space.ee/webmail/
|
||||||
permanent: false
|
permanent: false
|
||||||
|
---
|
||||||
|
apiVersion: networking.k8s.io/v1
|
||||||
|
kind: NetworkPolicy
|
||||||
|
metadata:
|
||||||
|
name: webmail
|
||||||
|
spec:
|
||||||
|
podSelector:
|
||||||
|
matchLabels:
|
||||||
|
app.kubernetes.io/name: webmail
|
||||||
|
policyTypes:
|
||||||
|
- Ingress
|
||||||
|
ingress:
|
||||||
|
- ports:
|
||||||
|
- port: 3000
|
||||||
|
from:
|
||||||
|
- namespaceSelector:
|
||||||
|
matchLabels:
|
||||||
|
kubernetes.io/metadata.name: traefik
|
||||||
|
podSelector:
|
||||||
|
matchLabels:
|
||||||
|
app.kubernetes.io/name: traefik
|
||||||
|
@ -140,3 +140,18 @@ spec:
|
|||||||
- name: cert
|
- name: cert
|
||||||
secret:
|
secret:
|
||||||
secretName: wildduck-tls
|
secretName: wildduck-tls
|
||||||
|
---
|
||||||
|
apiVersion: networking.k8s.io/v1
|
||||||
|
kind: NetworkPolicy
|
||||||
|
metadata:
|
||||||
|
name: zonemta
|
||||||
|
spec:
|
||||||
|
podSelector:
|
||||||
|
matchLabels:
|
||||||
|
app.kubernetes.io/name: wildduck
|
||||||
|
app.kubernetes.io/component: zonemta
|
||||||
|
policyTypes:
|
||||||
|
- Ingress
|
||||||
|
ingress:
|
||||||
|
- ports:
|
||||||
|
- port: 9465
|
||||||
|
Loading…
Reference in New Issue
Block a user