forked from k-space/kube
		
	fix(camtiler): disable broken egress network policies
This commit is contained in:
		| @@ -9,7 +9,7 @@ spec: | |||||||
|       component: camera-motion-detect |       component: camera-motion-detect | ||||||
|   policyTypes: |   policyTypes: | ||||||
|     - Ingress |     - Ingress | ||||||
|     - Egress | #    - Egress # Something wrong with using minio-clusters as namespaceSelector. | ||||||
|   ingress: |   ingress: | ||||||
|     - from: |     - from: | ||||||
|         - podSelector: |         - podSelector: | ||||||
| @@ -87,7 +87,7 @@ spec: | |||||||
|       component: logmower-eventsource |       component: logmower-eventsource | ||||||
|   policyTypes: |   policyTypes: | ||||||
|     - Ingress |     - Ingress | ||||||
|     - Egress | #    - Egress  # Something wrong with using mongodb-svc as podSelector. | ||||||
|   egress: |   egress: | ||||||
|     - to: |     - to: | ||||||
|         - podSelector: |         - podSelector: | ||||||
| @@ -152,41 +152,3 @@ spec: | |||||||
|           podSelector: |           podSelector: | ||||||
|             matchLabels: |             matchLabels: | ||||||
|               app.kubernetes.io/name: traefik |               app.kubernetes.io/name: traefik | ||||||
| --- |  | ||||||
| apiVersion: networking.k8s.io/v1 |  | ||||||
| kind: NetworkPolicy |  | ||||||
| metadata: |  | ||||||
|   name: minio |  | ||||||
| spec: |  | ||||||
|   podSelector: |  | ||||||
|     matchLabels: |  | ||||||
|       app.kubernetes.io/name: minio |  | ||||||
|   policyTypes: |  | ||||||
|     - Ingress |  | ||||||
|     - Egress |  | ||||||
|   egress: |  | ||||||
|     - ports: |  | ||||||
|         - port: http |  | ||||||
|       to: |  | ||||||
|         - podSelector: |  | ||||||
|             matchLabels: |  | ||||||
|               app.kubernetes.io/name: minio |  | ||||||
|   ingress: |  | ||||||
|     - ports: |  | ||||||
|         - port: http |  | ||||||
|       from: |  | ||||||
|         - podSelector: {} |  | ||||||
|     - from: |  | ||||||
|         - namespaceSelector: |  | ||||||
|             matchLabels: |  | ||||||
|               kubernetes.io/metadata.name: traefik |  | ||||||
|           podSelector: |  | ||||||
|             matchLabels: |  | ||||||
|               app.kubernetes.io/name: traefik |  | ||||||
|     - from: |  | ||||||
|         - namespaceSelector: |  | ||||||
|             matchLabels: |  | ||||||
|               kubernetes.io/metadata.name: monitoring |  | ||||||
|           podSelector: |  | ||||||
|             matchLabels: |  | ||||||
|               app.kubernetes.io/name: prometheus |  | ||||||
|   | |||||||
		Reference in New Issue
	
	Block a user