compliantkubernetes-apps
compliantkubernetes-apps copied to clipboard
elastisys
Lucian/net pol for dns and calico
What this PR does / why we need it: Network Policies for coredns, node-local-dns, dns-autoscaler, calico-accountant
Special notes for reviewer: I have added the Calico IPIPTunnel ip's in the sc-nodes / wc-nodes section as it was needed by coredns I did not create an allow rule for calico-accountant and it is using host network and the policy does not apply to it I did not create network policy for calico as it is using host network Add a screenshot or an example to illustrate the proposed solution:
Checklist:
- [x] Proper commit message prefix on all commits
Could you set the base for this PR to the branch you forked from? Makes it easier to review your changes
Do your changes depend on rw/np-sec or could you rebase on main and remove all other commits? Currently the diff includes changes already merged to main.
Do your changes depend on rw/np-sec or could you rebase on main and remove all other commits? Currently the diff includes changes already merged to main.
I initially made my changes based on rw/np-sec , but I just rebased on main about 30 min's ago
Do your changes depend on rw/np-sec or could you rebase on main and remove all other commits? Currently the diff includes changes already merged to main.
I initially made my changes based on rw/np-sec , but I just rebased on main about 30 min's ago
Can you then drop the commits from rw/np-sec and change so the pr merges into main?
Do your changes depend on rw/np-sec or could you rebase on main and remove all other commits? Currently the diff includes changes already merged to main.
I initially made my changes based on rw/np-sec , but I just rebased on main about 30 min's ago
Can you then drop the commits from rw/np-sec and change so the pr merges into main?
done just a few minutes ago
I don't see the point of having netpols for calico-accountant and node-local-dns since they use the host network, and regular Kubernetes netpols don't apply to the host network.
I don't see the point of having netpols for calico-accountant and node-local-dns since they use the host network, and regular Kubernetes netpols don't apply to the host network.
Removed the network policies for node-local-dns and calico-accountant
ping @OlleLarsson @Pavan-Gunda @aarnq @raviranjanelastisys @viktor-f @robinAwallace