mirror of
https://github.com/kubeshark/kubeshark.git
synced 2026-02-14 10:00:08 +00:00
77d16e73e8
* Update labels * Update kubeshark API url * Update other domains * comments --------- Co-authored-by: Alon Girmonsky <1990761+alongir@users.noreply.github.com>
105 lines
2.2 KiB
YAML
105 lines
2.2 KiB
YAML
apiVersion: networking.k8s.io/v1
|
|
kind: NetworkPolicy
|
|
metadata:
|
|
labels:
|
|
{{- include "kubeshark.labels" . | nindent 4 }}
|
|
{{- if .Values.tap.annotations }}
|
|
annotations:
|
|
{{- toYaml .Values.tap.annotations | nindent 4 }}
|
|
{{- end }}
|
|
name: kubeshark-hub-network-policy
|
|
namespace: {{ .Release.Namespace }}
|
|
spec:
|
|
podSelector:
|
|
matchLabels:
|
|
app.kubeshark.com/app: hub
|
|
policyTypes:
|
|
- Ingress
|
|
- Egress
|
|
ingress:
|
|
- ports:
|
|
- protocol: TCP
|
|
port: 8080
|
|
- ports:
|
|
- protocol: TCP
|
|
port: 9100
|
|
egress:
|
|
- {}
|
|
---
|
|
apiVersion: networking.k8s.io/v1
|
|
kind: NetworkPolicy
|
|
metadata:
|
|
labels:
|
|
{{- include "kubeshark.labels" . | nindent 4 }}
|
|
annotations:
|
|
{{- if .Values.tap.annotations }}
|
|
{{- toYaml .Values.tap.annotations | nindent 4 }}
|
|
{{- end }}
|
|
name: kubeshark-front-network-policy
|
|
namespace: {{ .Release.Namespace }}
|
|
spec:
|
|
podSelector:
|
|
matchLabels:
|
|
app.kubeshark.com/app: front
|
|
policyTypes:
|
|
- Ingress
|
|
- Egress
|
|
ingress:
|
|
- ports:
|
|
- protocol: TCP
|
|
port: 8080
|
|
egress:
|
|
- {}
|
|
---
|
|
apiVersion: networking.k8s.io/v1
|
|
kind: NetworkPolicy
|
|
metadata:
|
|
labels:
|
|
{{- include "kubeshark.labels" . | nindent 4 }}
|
|
annotations:
|
|
{{- if .Values.tap.annotations }}
|
|
{{- toYaml .Values.tap.annotations | nindent 4 }}
|
|
{{- end }}
|
|
name: kubeshark-dex-network-policy
|
|
namespace: {{ .Release.Namespace }}
|
|
spec:
|
|
podSelector:
|
|
matchLabels:
|
|
app.kubeshark.com/app: dex
|
|
policyTypes:
|
|
- Ingress
|
|
- Egress
|
|
ingress:
|
|
- ports:
|
|
- protocol: TCP
|
|
port: 5556
|
|
egress:
|
|
- {}
|
|
---
|
|
apiVersion: networking.k8s.io/v1
|
|
kind: NetworkPolicy
|
|
metadata:
|
|
labels:
|
|
{{- include "kubeshark.labels" . | nindent 4 }}
|
|
annotations:
|
|
{{- if .Values.tap.annotations }}
|
|
{{- toYaml .Values.tap.annotations | nindent 4 }}
|
|
{{- end }}
|
|
name: kubeshark-worker-network-policy
|
|
namespace: {{ .Release.Namespace }}
|
|
spec:
|
|
podSelector:
|
|
matchLabels:
|
|
app.kubeshark.com/app: worker
|
|
policyTypes:
|
|
- Ingress
|
|
- Egress
|
|
ingress:
|
|
- ports:
|
|
- protocol: TCP
|
|
port: {{ .Values.tap.proxy.worker.srvPort }}
|
|
- protocol: TCP
|
|
port: {{ .Values.tap.metrics.port }}
|
|
egress:
|
|
- {}
|