forked from k-space/kube
rasmus
6f2220445d
decision with eaas, currently broken, nobody has shown interest and trying to maintain kube as a first priority
39 lines
864 B
YAML
39 lines
864 B
YAML
---
|
|
apiVersion: networking.k8s.io/v1
|
|
kind: NetworkPolicy
|
|
metadata:
|
|
name: asterisk
|
|
spec:
|
|
podSelector:
|
|
matchLabels:
|
|
app: asterisk
|
|
policyTypes:
|
|
- Ingress
|
|
- Egress
|
|
ingress:
|
|
- from:
|
|
- namespaceSelector:
|
|
matchLabels:
|
|
kubernetes.io/metadata.name: monitoring
|
|
podSelector:
|
|
matchLabels:
|
|
app.kubernetes.io/name: prometheus
|
|
- from:
|
|
- ipBlock:
|
|
cidr: 100.101.0.0/16
|
|
- from:
|
|
- ipBlock:
|
|
cidr: 100.102.0.0/16
|
|
- from:
|
|
- ipBlock:
|
|
cidr: 81.90.125.224/32 # Lauri home
|
|
- from:
|
|
- ipBlock:
|
|
cidr: 172.20.8.241/32 # Erki A
|
|
- from:
|
|
- ipBlock:
|
|
cidr: 212.47.211.10/32 # Elisa SIP
|
|
egress:
|
|
- to:
|
|
- ipBlock:
|
|
cidr: 212.47.211.10/32 # Elisa SIP |