baptiste/k8s
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Add Naviya production GitOps deployment

Browse Source
This commit is contained in:
baptiste
2026-08-08 00:30:25 +02:00
parent 1cf87c2470
commit aa9b8da16d
19 changed files with 945 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
apps/naviya/70-policies.yaml
+161
View File
@@ -0,0 +1,161 @@
apiVersion: cilium.io/v2
kind: CiliumNetworkPolicy
metadata:
name: application-metier-frontend
namespace: application-metier
spec:
endpointSelector:
matchLabels:
app.kubernetes.io/name: application-metier
app.kubernetes.io/component: frontend
ingress:
- fromEntities:
- ingress
- host
toPorts:
- ports:
- port: "8080"
protocol: TCP
egress:
- toEndpoints:
- matchLabels:
app.kubernetes.io/name: application-metier
app.kubernetes.io/component: api
toPorts:
- ports:
- port: "8080"
protocol: TCP
- toEndpoints:
- matchLabels:
"k8s:io.kubernetes.pod.namespace": kube-system
"k8s:k8s-app": kube-dns
toPorts:
- ports:
- port: "53"
protocol: UDP
- port: "53"
protocol: TCP
---
apiVersion: cilium.io/v2
kind: CiliumNetworkPolicy
metadata:
name: application-metier-api
namespace: application-metier
spec:
endpointSelector:
matchLabels:
app.kubernetes.io/name: application-metier
app.kubernetes.io/component: api
ingress:
- fromEntities:
- cluster
- host
toPorts:
- ports:
- port: "8080"
protocol: TCP
egress:
- toEndpoints:
- matchLabels:
app.kubernetes.io/name: application-metier
app.kubernetes.io/component: postgres
toPorts:
- ports:
- port: "5432"
protocol: TCP
- toEndpoints:
- matchLabels:
app.kubernetes.io/name: application-metier
app.kubernetes.io/component: redis
toPorts:
- ports:
- port: "6379"
protocol: TCP
- toEndpoints:
- matchLabels:
"k8s:io.kubernetes.pod.namespace": kube-system
"k8s:k8s-app": kube-dns
toPorts:
- ports:
- port: "53"
protocol: UDP
- port: "53"
protocol: TCP
- toEntities:
- world
toPorts:
- ports:
- port: "443"
protocol: TCP
---
apiVersion: cilium.io/v2
kind: CiliumNetworkPolicy
metadata:
name: application-metier-postgres
namespace: application-metier
spec:
endpointSelector:
matchLabels:
app.kubernetes.io/name: application-metier
app.kubernetes.io/component: postgres
ingress:
- fromEndpoints:
- matchExpressions:
- key: app.kubernetes.io/component
operator: In
values: [api, migration, bootstrap, backup, restore]
toPorts:
- ports:
- port: "5432"
protocol: TCP
---
apiVersion: cilium.io/v2
kind: CiliumNetworkPolicy
metadata:
name: application-metier-redis
namespace: application-metier
spec:
endpointSelector:
matchLabels:
app.kubernetes.io/name: application-metier
app.kubernetes.io/component: redis
ingress:
- fromEndpoints:
- matchLabels:
app.kubernetes.io/name: application-metier
app.kubernetes.io/component: api
toPorts:
- ports:
- port: "6379"
protocol: TCP
---
apiVersion: cilium.io/v2
kind: CiliumNetworkPolicy
metadata:
name: application-metier-jobs
namespace: application-metier
spec:
endpointSelector:
matchExpressions:
- key: app.kubernetes.io/component
operator: In
values: [migration, bootstrap, backup, restore]
egress:
- toEndpoints:
- matchLabels:
app.kubernetes.io/name: application-metier
app.kubernetes.io/component: postgres
toPorts:
- ports:
- port: "5432"
protocol: TCP
- toEndpoints:
- matchLabels:
"k8s:io.kubernetes.pod.namespace": kube-system
"k8s:k8s-app": kube-dns
toPorts:
- ports:
- port: "53"
protocol: UDP
- port: "53"
protocol: TCP