Allow communication to runtime apiserver from admission deployment.

gardener · Feb 8, 2024 · e6928ba · e6928ba
1 parent 323a249
commit e6928ba
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/charts/gardener-extension-admission-calico/charts/runtime/templates/deplyoment.yaml b/charts/gardener-extension-admission-calico/charts/runtime/templates/deplyoment.yaml
@@ -21,6 +21,7 @@ spec:
       labels:
         networking.gardener.cloud/to-dns: allowed
         networking.resources.gardener.cloud/to-virtual-garden-kube-apiserver-tcp-443: allowed
+        networking.gardener.cloud/to-runtime-apiserver: allowed
 {{ include "labels" . | indent 8 }}
     spec:
       serviceAccountName: {{ include "name" . }}