mirror of
https://github.com/cert-manager/webhook-example.git
synced 2025-07-01 22:35:49 +02:00
fix(helm-chart): add a network policy allowing egress to ibm cis
This commit is contained in:
parent
1ca17544d8
commit
2e95f8d804
1 changed files with 17 additions and 2 deletions
|
@ -27,12 +27,13 @@ metadata:
|
|||
spec:
|
||||
podSelector:
|
||||
matchLabels:
|
||||
app: {{ include "cert-manager-ibm-cis-webhook.name" . }}
|
||||
app.kubernetes.io/name: {{ include "cert-manager-ibm-cis-webhook.name" . }}
|
||||
policyTypes:
|
||||
- Ingress
|
||||
ingress:
|
||||
- from:
|
||||
- podSelector: {}
|
||||
- namespaceSelector: {}
|
||||
ports:
|
||||
- protocol: TCP
|
||||
port: {{ .Values.containerPort }}
|
||||
|
@ -44,9 +45,23 @@ metadata:
|
|||
spec:
|
||||
podSelector:
|
||||
matchLabels:
|
||||
app: {{ include "cert-manager-ibm-cis-webhook.name" . }}
|
||||
app.kubernetes.io/name: {{ include "cert-manager-ibm-cis-webhook.name" . }}
|
||||
policyTypes:
|
||||
- Egress
|
||||
egress:
|
||||
- {}
|
||||
---
|
||||
apiVersion: networking.k8s.io/v1
|
||||
kind: NetworkPolicy
|
||||
metadata:
|
||||
name: allow-egress-to-cis
|
||||
spec:
|
||||
podSelector:
|
||||
matchLabels:
|
||||
app.kubernetes.io/name: {{ include "cert-manager-ibm-cis-webhook.name" . }}
|
||||
policyTypes:
|
||||
- Egress
|
||||
egress:
|
||||
- ports:
|
||||
- port: 443
|
||||
{{- end }}
|
||||
|
|
Loading…
Reference in a new issue