Files
home-cluster-ops/kubernetes/apps/cilium/networkpolicies/egress-kubeapi.yaml
2024-06-10 12:20:26 +10:00

22 lines
439 B
YAML

apiVersion: cilium.io/v2
kind: CiliumClusterwideNetworkPolicy
metadata:
name: egress-kubeapi
spec:
endpointSelector:
matchLabels:
rpi5.cluster.policy/egress-kubeapi: "true"
egress:
- toEntities:
- host
- remote-node
toPorts:
- ports:
- port: "6443"
- toEntities:
- kube-apiserver
toPorts:
- ports:
- port: "443"
- port: "6443"