fix(netpol): liberar egress ao CIDR de services (ClusterIP) para backups/JWKS
This commit is contained in:
@@ -52,8 +52,9 @@ spec:
|
||||
matchLabels:
|
||||
kubernetes.io/metadata.name: kube-system
|
||||
egress:
|
||||
- to: # intra-namespace (postgres, keycloak)
|
||||
- to: # intra-namespace (pods) + ClusterIPs (VIP de service, pre-DNAT)
|
||||
- podSelector: {}
|
||||
- ipBlock: { cidr: 10.43.0.0/16 }
|
||||
- to: # DNS (CoreDNS em kube-system)
|
||||
- namespaceSelector:
|
||||
matchLabels:
|
||||
|
||||
@@ -56,8 +56,9 @@ spec:
|
||||
matchLabels:
|
||||
kubernetes.io/metadata.name: kube-system # Traefik (ingress)
|
||||
egress:
|
||||
- to: # intra-namespace (postgres, keycloak)
|
||||
- to: # intra-namespace (pods) + ClusterIPs (VIP de service, pre-DNAT)
|
||||
- podSelector: {}
|
||||
- ipBlock: { cidr: 10.43.0.0/16 }
|
||||
- to: # DNS (CoreDNS em kube-system)
|
||||
- namespaceSelector:
|
||||
matchLabels:
|
||||
|
||||
Reference in New Issue
Block a user