From 1dda7b6d84a47b188c2452b2debf0d20a1cf589e Mon Sep 17 00:00:00 2001
From: Sheogorath <sheogorath@shivering-isles.com>
Date: Sat, 18 Nov 2023 13:59:07 +0100
Subject: [PATCH] fix(shared): temporarily allow apiserver access using
hardcoded ranges
---
shared/networkpolicies/allow-to-database.yaml | 11 +++--------
1 file changed, 3 insertions(+), 8 deletions(-)
diff --git a/shared/networkpolicies/allow-to-database.yaml b/shared/networkpolicies/allow-to-database.yaml
index 10b360881..53a142d6c 100644
--- a/shared/networkpolicies/allow-to-database.yaml
+++ b/shared/networkpolicies/allow-to-database.yaml
@@ -5,13 +5,8 @@ metadata:
spec:
egress:
- to:
- - namespaceSelector:
- matchLabels:
- kubernetes.io/metadata.name: kube-system
- podSelector:
- matchLabels:
- component: kube-apiserver
- tier: control-plane
+ - ipBlock:
+ cidr: 192.168.100.0/25
ports:
- protocol: TCP
port: 6443
@@ -29,4 +24,4 @@ spec:
matchLabels:
application: spilo
policyTypes:
- - Egress
\ No newline at end of file
+ - Egress
--
GitLab