25 lines
818 B
YAML
25 lines
818 B
YAML
apiVersion: cilium.io/v2
|
|
kind: CiliumNetworkPolicy
|
|
metadata:
|
|
name: oldipmi-external-only
|
|
annotations:
|
|
argocd.argoproj.io/sync-wave: '-1'
|
|
spec:
|
|
endpointSelector: {}
|
|
egress:
|
|
# Includes Internet, 192.168.0.0/16 LAN and 10.12.0.0/16 Funkfeuer.
|
|
- toEntities: [world]
|
|
egressDeny:
|
|
# Identity-based protection follows pod and node address changes.
|
|
- toEntities: [cluster, host, remote-node, kube-apiserver]
|
|
- toCIDR:
|
|
- 10.96.0.0/12 # Kubernetes ServiceCIDR
|
|
- 169.254.0.0/16 # Link-local/metadata services
|
|
- 10.12.4.170/32 # Cluster services exposed through Funkfeuer
|
|
# MetalLB's complete reserved pool: 192.168.0.10-192.168.0.49.
|
|
- 192.168.0.10/31
|
|
- 192.168.0.12/30
|
|
- 192.168.0.16/28
|
|
- 192.168.0.32/28
|
|
- 192.168.0.48/31
|