Skip to content

Commit

Permalink
add resource and netpols
Browse files Browse the repository at this point in the history
  • Loading branch information
timtorChen committed Nov 28, 2024
1 parent 44c1f4f commit bef9cf8
Show file tree
Hide file tree
Showing 3 changed files with 33 additions and 1 deletion.
15 changes: 15 additions & 0 deletions kubernetes/vector-operator/app/netpol.yaml
Original file line number Diff line number Diff line change
@@ -1 +1,16 @@
---
apiVersion: cilium.io/v2
kind: CiliumNetworkPolicy
metadata:
namespace: vector-operator
name: vector-operator-policy
specs:
- endpointSelector:
matchLabels:
app.kubernetes.io/name: vector-operator
egress:
- toEntities: [kube-apiserver]
toPorts:
- ports:
- protocol: TCP
port: "6443"
7 changes: 6 additions & 1 deletion kubernetes/vector-operator/app/release.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -30,6 +30,11 @@ spec:
drop: ["ALL"]
seccompProfile:
type: RuntimeDefault
resources: {}
resources:
limits:
memory: 128Mi
requests:
cpu: 50m
memory: 50Mi
serviceAccount:
create: true
12 changes: 12 additions & 0 deletions kubernetes/vector-operator/base/netpol.yaml
Original file line number Diff line number Diff line change
@@ -1 +1,13 @@
---
apiVersion: cilium.io/v2
kind: CiliumNetworkPolicy
metadata:
namespace: vector-operator
name: vector-operator-default-policy
specs:
- endpointSelector:
matchLabels: {}
ingress:
- {}
egress:
- {}

0 comments on commit bef9cf8

Please sign in to comment.