feat(longhorn): Allow access to oauth2-proxy

clusters/k8s01/longhorn/oauth2.yaml

@@ -12,8 +12,8 @@ sops:
     azure_kv: []
     hc_vault: []
     age: []
-    lastmodified: "2022-01-28T21:50:17Z"
-    mac: ENC[AES256_GCM,data:0TIrIS8fJsW9sZvh728LkbYU2z8LBCgKccImJIrrVK4gQM+ACXGK5y/T5XxvZR+OXGKLOaqj4tXUFsXVi1Fdgoma6dB5IrmVO+XE+GW9e4HJNIA6I4r8zKImk3rUcEvMsSEZtLXMN1BvQk+ok//rIq782DQwrUKLQy4Z1ZhmzxE=,iv:alB3ySQ+SXvFoVujVVetfOX+Jyjfr6Gj6Crpok/4Rhc=,tag:RnzW9EUv2OR/0xWaC32vqg==,type:str]
+    lastmodified: "2022-01-28T21:53:04Z"
+    mac: ENC[AES256_GCM,data:JDkpOT350wCl8ILGivmxV9MwfYJkYx2COgL4T0TJjXxytv+RxNsqnzPsq8TrxNmZ/0R7OILd+MrKWTBxQDhZCJcIcXLilONMmPa3Y/x28V4AOIQbFzO0EVwcjSPWnFDkJlTeH13QWEZ3Zr5hzFzsQzqYYCpaDWvHwigmJJ5mkvw=,iv:fi9T3Pvdft67vGevQQmqpCBQ5IHhquXzQseImqmajvs=,tag:iBOzhzfvGl7IPz6vrRVYmg==,type:str]
     pgp:
         - created_at: "2022-01-22T04:06:16Z"
           enc: |-
@@ -123,8 +123,74 @@ sops:
     azure_kv: []
     hc_vault: []
     age: []
-    lastmodified: "2022-01-28T21:50:17Z"
-    mac: ENC[AES256_GCM,data:0TIrIS8fJsW9sZvh728LkbYU2z8LBCgKccImJIrrVK4gQM+ACXGK5y/T5XxvZR+OXGKLOaqj4tXUFsXVi1Fdgoma6dB5IrmVO+XE+GW9e4HJNIA6I4r8zKImk3rUcEvMsSEZtLXMN1BvQk+ok//rIq782DQwrUKLQy4Z1ZhmzxE=,iv:alB3ySQ+SXvFoVujVVetfOX+Jyjfr6Gj6Crpok/4Rhc=,tag:RnzW9EUv2OR/0xWaC32vqg==,type:str]
+    lastmodified: "2022-01-28T21:53:04Z"
+    mac: ENC[AES256_GCM,data:JDkpOT350wCl8ILGivmxV9MwfYJkYx2COgL4T0TJjXxytv+RxNsqnzPsq8TrxNmZ/0R7OILd+MrKWTBxQDhZCJcIcXLilONMmPa3Y/x28V4AOIQbFzO0EVwcjSPWnFDkJlTeH13QWEZ3Zr5hzFzsQzqYYCpaDWvHwigmJJ5mkvw=,iv:fi9T3Pvdft67vGevQQmqpCBQ5IHhquXzQseImqmajvs=,tag:iBOzhzfvGl7IPz6vrRVYmg==,type:str]
+    pgp:
+        - created_at: "2022-01-22T04:06:16Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            wcFMA7kpg2bgzVHcARAAgt+09YMPbbkGkg+/VgMgvxC4YDoQxlcklv3OfrS29yHF
+            27d8LBexyRYUTqkKhxyFJl+1dOqoE+o2uZjg9J/WSNR4MIBMm4Whn9rly4hoyk1W
+            BSKqZxt/POdP7ZtZ1Ke3hrZiV4UlDDAagToxrSWG4suXr45i0wUGICbNakrlEB9P
+            7Ub7nM6aIWjyRJpqPhtJaaq1EWsj/+2NagXOMi0cWjj4wzEy+KZMC3lMVM3db/zw
+            KDxsZWfK2/gRc7qqQWrmKB5bqQPhKVwUExrzKofExaSozXq9c694mmThVyR2SFc9
+            OvNLlqLpeRfBpoY9F19Wz0YhQRUxfPdYgV0ZqngxIYzx2+2DqCz1fkW/hIcMLyj9
+            LBNUTHXcRP9O3ZWWx0flnjcE8Cyz4qmMq9hf0iEWtZb1cO0v5Z6+lYo9ThQvcPCp
+            DMuZ2l65Sfto56y84j8FPshOS6Heo97mwbO/BmOZYnQ4RtGFc9KlFtLBMyRZfqEo
+            b6O77YyzCcKYOdgrXjEORxvUq2ftHxTQFBdYUHO2Rpf0tyrZwUYnIWBXnB5fOp/y
+            HjWzl8ZpQxhJQubiqteEovYdtv+1ionPBLZkzzx3EDbNvSroQijENSkQhyl7QbMj
+            XURIII47j0yda/kZ4mupPz4isY4kEi/AtwCI+tumI0c7gH7iew/kjoQcgyTVMOLS
+            5gFZuhZ6ixAXhDms0RKfYq6iKAzXxslg0qcYAOcjwqq5u+cQJTfSrLjivxNs2cIo
+            M/5BCddS+GzLSTCNYStLfOfkFGlrOccM7I8Fzy3PYhtc9eLwlSI/AA==
+            =c/3x
+            -----END PGP MESSAGE-----
+          fp: 286791FB6648539775DB31B8FCB98C2A3EC6F601
+        - created_at: "2022-01-22T04:06:16Z"
+          enc: |
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMA4oYbIHZIrAPARAAyGLyK65vBqTfe/5iFAuaaWg9sWRTAfnGnDEgxAPdp4EQ
+            yKOT9AyRLes5yRtSz8ugRVjvQd/B9bj+VE7MosFarpjw5ckzRKjSHpanzPqGGWjI
+            2Ce9gbSljx7AhmXujK+TRhf4PbliopQWdStNWZ08p17UG2G0UiNPgun0ocHxUqVN
+            46iUl51aL5ElZUmA3bfcwpYu6lCiDCEvlrX+7ZSsKEYcg1VQ+oi0XTxfEugSFX1N
+            4QjkSHfFYWCqt5IOB2+G5HCZfwD3n3a9tTjpehnTfC61Dn3r4tAVunD3dDaVvqNK
+            GOJJvvykUOGrszIInJbXd3Bvp/HGm5jp5eLiMo1GQeG7XxIuiIDV41AkAEEv5nYW
+            fpkeW/a+2NI/TzM3PsOOxEmghuG4k5lnpYwrEcp/s3OmYwDRLvSQRD9rIjw33VnU
+            WhgfsjwqlqLbyUTwssn8ztEUvoVXQ/lmsFJ2xrzBuWV4tSOUMX+jpA1bhJ1QCcOd
+            vR/fMH2ZMppho7bnUUVjFGtRZWLAh4OPdCZ4fTkWpUbrFE9HBP1rcPxe7DqzDlbl
+            tb5yfNLvHGWh/Myqm7CP04qIlWGyDT4UonAWFmPLt6mWXf6DrlOl8n+iAZbX7d+c
+            w8y/mAapNcTZZHG/+M5hq0anS9mZ65yR3X2znn8ErNot8alJBcOdulM2aDrwk9HU
+            aAEJAhDKMKsgECqiT3WYb8AVOHFk0O/CCKDFBTt+S+Bbjeb2vqBE8uRNMECpZPU9
+            NSZGFfj97fyI1At7TgVko8Ae/2w0xdb80g/81/kVuTNTm/0z60RqOooENSxfGRJ9
+            PNNoVr/LwxMQ
+            =e2fo
+            -----END PGP MESSAGE-----
+          fp: B137EE1549DFAF960DD1E2B15147025FB9F09E07
+    encrypted_regex: ^(data|stringData|email|dnsZones?|dnsNames?|hosts?|tang|externalURL|.*-secret|.*-url|.*Secret|.*-domain)$
+    version: 3.7.1
+---
+apiVersion: networking.k8s.io/v1
+kind: NetworkPolicy
+metadata:
+    name: allow-ingress-to-oauth2
+spec:
+    podSelector:
+        matchLabels:
+            app: oauth2-proxy
+    ingress:
+        - from:
+            - namespaceSelector:
+                matchLabels:
+                    ingress.shivering-isles.com/network-access-required: "true"
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age: []
+    lastmodified: "2022-01-28T21:53:04Z"
+    mac: ENC[AES256_GCM,data:JDkpOT350wCl8ILGivmxV9MwfYJkYx2COgL4T0TJjXxytv+RxNsqnzPsq8TrxNmZ/0R7OILd+MrKWTBxQDhZCJcIcXLilONMmPa3Y/x28V4AOIQbFzO0EVwcjSPWnFDkJlTeH13QWEZ3Zr5hzFzsQzqYYCpaDWvHwigmJJ5mkvw=,iv:fi9T3Pvdft67vGevQQmqpCBQ5IHhquXzQseImqmajvs=,tag:iBOzhzfvGl7IPz6vrRVYmg==,type:str]
     pgp:
         - created_at: "2022-01-22T04:06:16Z"
           enc: |-