79 lines
2.2 KiB
YAML
79 lines
2.2 KiB
YAML
apiVersion: networking.k8s.io/v1
|
|
kind: NetworkPolicy
|
|
metadata:
|
|
name: << resource_name >>
|
|
namespace: << namespace >>
|
|
spec:
|
|
<%- if apply_to_all_pods %>
|
|
podSelector: {}
|
|
<%- else %>
|
|
podSelector:
|
|
matchLabels:
|
|
<< pod_selector_label_key >>: << pod_selector_label_value >>
|
|
<%- endif %>
|
|
<%- if ingress_enabled or egress_enabled %>
|
|
policyTypes:
|
|
<%- if ingress_enabled %>
|
|
- Ingress
|
|
<%- endif %>
|
|
<%- if egress_enabled %>
|
|
- Egress
|
|
<%- endif %>
|
|
<%- endif %>
|
|
<%- if ingress_enabled %>
|
|
<%- if ingress_allow_same_namespace or ingress_namespace_selector_enabled or ingress_ipblock_enabled or ingress_port_enabled %>
|
|
ingress:
|
|
-
|
|
<%- if ingress_allow_same_namespace or ingress_namespace_selector_enabled or ingress_ipblock_enabled %>
|
|
from:
|
|
<%- if ingress_allow_same_namespace %>
|
|
- podSelector: {}
|
|
<%- endif %>
|
|
<%- if ingress_namespace_selector_enabled %>
|
|
- namespaceSelector:
|
|
matchLabels:
|
|
<< ingress_namespace_selector_label_key >>: << ingress_namespace_selector_label_value >>
|
|
<%- endif %>
|
|
<%- if ingress_ipblock_enabled %>
|
|
- ipBlock:
|
|
cidr: << ingress_ipblock_cidr >>
|
|
<%- endif %>
|
|
<%- endif %>
|
|
<%- if ingress_port_enabled %>
|
|
ports:
|
|
- port: << ingress_port >>
|
|
protocol: << ingress_port_protocol >>
|
|
<%- endif %>
|
|
<%- else %>
|
|
ingress: []
|
|
<%- endif %>
|
|
<%- endif %>
|
|
<%- if egress_enabled %>
|
|
<%- if egress_allow_same_namespace or egress_namespace_selector_enabled or egress_ipblock_enabled or egress_port_enabled %>
|
|
egress:
|
|
-
|
|
<%- if egress_allow_same_namespace or egress_namespace_selector_enabled or egress_ipblock_enabled %>
|
|
to:
|
|
<%- if egress_allow_same_namespace %>
|
|
- podSelector: {}
|
|
<%- endif %>
|
|
<%- if egress_namespace_selector_enabled %>
|
|
- namespaceSelector:
|
|
matchLabels:
|
|
<< egress_namespace_selector_label_key >>: << egress_namespace_selector_label_value >>
|
|
<%- endif %>
|
|
<%- if egress_ipblock_enabled %>
|
|
- ipBlock:
|
|
cidr: << egress_ipblock_cidr >>
|
|
<%- endif %>
|
|
<%- endif %>
|
|
<%- if egress_port_enabled %>
|
|
ports:
|
|
- port: << egress_port >>
|
|
protocol: << egress_port_protocol >>
|
|
<%- endif %>
|
|
<%- else %>
|
|
egress: []
|
|
<%- endif %>
|
|
<%- endif %>
|