gitea_admin/Homelabv4
1
0
Fork 0
mirror of https://gitlab.kube.huskypup.net/Scooby/Homelabv4.git synced 2026-08-20 23:16:49 +00:00
Code Issues Packages Projects Releases Wiki Activity

Allow envoy-gateway-system ingress to vault and authentik

Browse Source 
All namespaces with CiliumNetworkPolicies need envoy-gateway-system
access now that services are migrating from Istio to Envoy gateway.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
This commit is contained in:
Scooby Husky
2026-03-12 23:59:53 -05:00
co-authored by Claude Opus 4.6
parent 7a9703f3bc
commit 3244fdf611
1 changed files with 8 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
infrastructure/cilium/manifests/network-policies/baseline.yaml
+8 -2
View File
@@ -22,11 +22,14 @@ spec:
- host - host
- kube-apiserver - kube-apiserver
- remote-node - remote-node
# Istio ingress gateway # Ingress gateways
- fromEndpoints: - fromEndpoints:
- matchLabels: - matchLabels:
k8s:io.kubernetes.pod.namespace: istio-system k8s:io.kubernetes.pod.namespace: istio-system
istio: ingressgateway istio: ingressgateway
- fromEndpoints:
- matchLabels:
k8s:io.kubernetes.pod.namespace: envoy-gateway-system
# External Secrets Operator # External Secrets Operator
- fromEndpoints: - fromEndpoints:
- matchLabels: - matchLabels:
@@ -55,10 +58,13 @@ spec:
- host - host
- kube-apiserver - kube-apiserver
- remote-node - remote-node
# Istio ingress gateway # Ingress gateways
- fromEndpoints: - fromEndpoints:
- matchLabels: - matchLabels:
k8s:io.kubernetes.pod.namespace: istio-system k8s:io.kubernetes.pod.namespace: istio-system
- fromEndpoints:
- matchLabels:
k8s:io.kubernetes.pod.namespace: envoy-gateway-system
# Internal authentik traffic (server <-> worker, pg access) # Internal authentik traffic (server <-> worker, pg access)
- fromEndpoints: - fromEndpoints:
- matchLabels: - matchLabels: