mirror of
https://github.com/didi/KnowStreaming.git
synced 2026-01-03 02:52:08 +08:00
38 lines
1.0 KiB
YAML
38 lines
1.0 KiB
YAML
networkPolicy:
|
|
http:
|
|
enabled: true
|
|
explicitNamespacesSelector:
|
|
# Accept from namespaces with all those different rules (from whitelisted Pods)
|
|
matchLabels:
|
|
role: frontend-http
|
|
matchExpressions:
|
|
- {key: role, operator: In, values: [frontend-http]}
|
|
additionalRules:
|
|
- podSelector:
|
|
matchLabels:
|
|
role: frontend-http
|
|
- podSelector:
|
|
matchExpressions:
|
|
- key: role
|
|
operator: In
|
|
values:
|
|
- frontend-http
|
|
transport:
|
|
enabled: true
|
|
allowExternal: true
|
|
explicitNamespacesSelector:
|
|
matchLabels:
|
|
role: frontend-transport
|
|
matchExpressions:
|
|
- {key: role, operator: In, values: [frontend-transport]}
|
|
additionalRules:
|
|
- podSelector:
|
|
matchLabels:
|
|
role: frontend-transport
|
|
- podSelector:
|
|
matchExpressions:
|
|
- key: role
|
|
operator: In
|
|
values:
|
|
- frontend-transport
|