Skip to content
Snippets Groups Projects
Verified Commit 586c12d4 authored by Sheogorath's avatar Sheogorath :european_castle:
Browse files

fix(dns): Add allow from everywhere network policy

This patch should add an "allow from everywhere" network policy for DNS
ports in order to allow the DNS service to function as intended.

This workaround is needed since the current network policy blocks all
traffic from outside the namespace, resulting in a non-working service.
parent 77df23c8
No related branches found
No related tags found
No related merge requests found
......@@ -4,5 +4,6 @@ namespace: dns
resources:
- namespace.yaml
- dns.yaml
- networkpolicy.yaml
- ../../../shared/networkpolicies/allow-from-same-namespace.yaml
- ../../../shared/resourcequotas/default.yaml
---
apiVersion: networking.k8s.io/v1
kind: NetworkPolicy
metadata:
name: allow-from-everywhere-to-do53
spec:
podSelector:
matchLabels:
app: resolver
ingress:
- from:
- ipBlock:
cidr: 0.0.0.0/0
ports:
- protocol: UDP
port: 53
- protocol: TCP
port: 53
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment