From 6c07e06de7baefdab20e59babfc56a46704bcaed Mon Sep 17 00:00:00 2001
From: Sheogorath <sheogorath@shivering-isles.com>
Date: Fri, 17 Nov 2023 21:12:30 +0100
Subject: [PATCH] fix(shared): Add missing access to kube-apiserver
---
shared/networkpolicies/allow-to-database.yaml | 11 +++++++++++
1 file changed, 11 insertions(+)
diff --git a/shared/networkpolicies/allow-to-database.yaml b/shared/networkpolicies/allow-to-database.yaml
index b472c8ed1..10b360881 100644
--- a/shared/networkpolicies/allow-to-database.yaml
+++ b/shared/networkpolicies/allow-to-database.yaml
@@ -4,6 +4,17 @@ metadata:
name: allow-to-database
spec:
egress:
+ - to:
+ - namespaceSelector:
+ matchLabels:
+ kubernetes.io/metadata.name: kube-system
+ podSelector:
+ matchLabels:
+ component: kube-apiserver
+ tier: control-plane
+ ports:
+ - protocol: TCP
+ port: 6443
- to:
- ipBlock:
cidr: 192.168.100.60/32
--
GitLab