From c4b8678f153de260046b73e33b7196137f2da0e9 Mon Sep 17 00:00:00 2001 From: Flux <> Date: Tue, 6 Aug 2024 15:17:29 -0500 Subject: [PATCH] Add Flux v2.3.0 component manifests --- .../flux-system/gotk-components.yaml | 59 +++++++++++++++++++ 1 file changed, 59 insertions(+) diff --git a/clusters/my-cluster/flux-system/gotk-components.yaml b/clusters/my-cluster/flux-system/gotk-components.yaml index 6dae2c4..8fd99ab 100644 --- a/clusters/my-cluster/flux-system/gotk-components.yaml +++ b/clusters/my-cluster/flux-system/gotk-components.yaml @@ -13,6 +13,65 @@ metadata: pod-security.kubernetes.io/warn-version: latest name: flux-system --- +apiVersion: networking.k8s.io/v1 +kind: NetworkPolicy +metadata: + labels: + app.kubernetes.io/instance: flux-system + app.kubernetes.io/part-of: flux + app.kubernetes.io/version: v2.3.0 + name: allow-egress + namespace: flux-system +spec: + egress: + - {} + ingress: + - from: + - podSelector: {} + podSelector: {} + policyTypes: + - Ingress + - Egress +--- +apiVersion: networking.k8s.io/v1 +kind: NetworkPolicy +metadata: + labels: + app.kubernetes.io/instance: flux-system + app.kubernetes.io/part-of: flux + app.kubernetes.io/version: v2.3.0 + name: allow-scraping + namespace: flux-system +spec: + ingress: + - from: + - namespaceSelector: {} + ports: + - port: 8080 + protocol: TCP + podSelector: {} + policyTypes: + - Ingress +--- +apiVersion: networking.k8s.io/v1 +kind: NetworkPolicy +metadata: + labels: + app.kubernetes.io/instance: flux-system + app.kubernetes.io/part-of: flux + app.kubernetes.io/version: v2.3.0 + name: allow-webhooks + namespace: flux-system +spec: + ingress: + - from: + - namespaceSelector: {} + podSelector: + matchLabels: + app: notification-controller + policyTypes: + - Ingress +--- apiVersion: v1 kind: ResourceQuota metadata: