homelab-gitops/platform/default-network-policies/kube-system-baseline.yaml
gwg313 bfe8435665
update default deny
Signed-off-by: gwg313 <gwg313@pm.me>
2026-05-17 00:05:02 -04:00

28 lines
518 B
YAML

apiVersion: cilium.io/v2
kind: CiliumNetworkPolicy
metadata:
name: kube-system-baseline
namespace: kube-system
spec:
endpointSelector: {}
ingress:
- fromEntities:
- cluster
- host
- remote-node
egress:
- toEntities:
- kube-apiserver
- cluster
- toEndpoints:
- matchLabels:
k8s:k8s-app: kube-dns
toPorts:
- ports:
- port: "53"
protocol: UDP
- port: "53"
protocol: TCP