From 0d2c6dfc5fa28929433909345e156538977d90fe Mon Sep 17 00:00:00 2001 From: Edward Cheng Date: Wed, 12 Jun 2024 22:32:55 +1000 Subject: [PATCH 1/2] add ingress-nginx dependency to ingress-nginx network policies --- .../cilium/networkpolicies/ingress-nginx.yaml | 12 ++++++++++++ 1 file changed, 12 insertions(+) diff --git a/kubernetes/infrastructure/cilium/networkpolicies/ingress-nginx.yaml b/kubernetes/infrastructure/cilium/networkpolicies/ingress-nginx.yaml index fdd215f..ef04d25 100644 --- a/kubernetes/infrastructure/cilium/networkpolicies/ingress-nginx.yaml +++ b/kubernetes/infrastructure/cilium/networkpolicies/ingress-nginx.yaml @@ -13,6 +13,9 @@ spec: io.kubernetes.pod.namespace: ingress-nginx app.kubernetes.io/name: ingress-nginx app.kubernetes.io/component: controller + dependsOn: + - name: ingress-nginx + namespace: ingress-nginx --- apiVersion: cilium.io/v2 kind: CiliumNetworkPolicy @@ -31,6 +34,9 @@ spec: matchExpressions: - key: io.kubernetes.pod.namespace operator: Exists + dependsOn: + - name: ingress-nginx + namespace: ingress-nginx --- apiVersion: cilium.io/v2 kind: CiliumClusterwideNetworkPolicy @@ -47,6 +53,9 @@ spec: io.kubernetes.pod.namespace: ingress-nginx app.kubernetes.io/name: ingress-nginx app.kubernetes.io/component: controller + dependsOn: + - name: ingress-nginx + namespace: ingress-nginx --- apiVersion: cilium.io/v2 kind: CiliumNetworkPolicy @@ -65,3 +74,6 @@ spec: matchExpressions: - key: io.kubernetes.pod.namespace operator: Exists + dependsOn: + - name: ingress-nginx + namespace: ingress-nginx From 5fd0bfe46d4135b3164f3d0f13e6aded889d34bf Mon Sep 17 00:00:00 2001 From: Edward Cheng Date: Wed, 12 Jun 2024 22:34:07 +1000 Subject: [PATCH 2/2] suspend cilium for now --- kubernetes/infrastructure/cilium/cilium.yaml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/kubernetes/infrastructure/cilium/cilium.yaml b/kubernetes/infrastructure/cilium/cilium.yaml index 0ca8f2a..4f06c4b 100644 --- a/kubernetes/infrastructure/cilium/cilium.yaml +++ b/kubernetes/infrastructure/cilium/cilium.yaml @@ -4,6 +4,7 @@ metadata: name: cilium namespace: kube-system spec: + suspend: true interval: 1h path: ./kubernetes/infrastructure/cilium/app prune: true @@ -18,6 +19,7 @@ metadata: name: cilium-networkpolicies namespace: kube-system spec: + suspend: true interval: 1h path: ./kubernetes/infrastructure/cilium/networkpolicies prune: true