add NB endpoint to cluster policy

linode · May 16, 2024 · c441740 · c441740
1 parent 9c0d404
commit c441740
Show file tree

Hide file tree

Showing 4 changed files with 12 additions and 1 deletion.
diff --git a/docs/src/topics/firewalling.md b/docs/src/topics/firewalling.md
@@ -57,7 +57,7 @@ spec:
             - port: "9345"
             - port: "6443"
 ```
-additional rules can be added by creating a new policy
+Alternatively, additional rules can be added by creating a new policy
 ```yaml
 apiVersion: "cilium.io/v2"
 kind: CiliumClusterwideNetworkPolicy

diff --git a/templates/addons/cilium-network-policies/ciliumNetworkPolicies.yaml b/templates/addons/cilium-network-policies/ciliumNetworkPolicies.yaml
@@ -16,6 +16,7 @@ data:
             - cluster
         - fromCIDR:
             - 10.0.0.0/8
+            - 192.168.128.0/17
     ---
     apiVersion: "cilium.io/v2"
     kind: CiliumClusterwideNetworkPolicy
@@ -25,6 +26,10 @@ data:
       description: "allow etcd & api server traffic"
       nodeSelector: {}
       ingress:
+        - fromEntities:
+            - cluster
+        - fromCIDR:
+            - 10.0.0.0/8
         - fromEntities:
             - world
           toPorts:

diff --git a/templates/flavors/k3s/ciliumNetworkPolicies.yaml b/templates/flavors/k3s/ciliumNetworkPolicies.yaml
@@ -16,6 +16,7 @@ data:
             - cluster
         - fromCIDR:
             - 10.0.0.0/8
+            - 192.168.128.0/17
     ---
     apiVersion: "cilium.io/v2"
     kind: CiliumClusterwideNetworkPolicy
@@ -25,6 +26,10 @@ data:
       description: "allow etcd & api server traffic"
       nodeSelector: {}
       ingress:
+        - fromEntities:
+            - cluster
+        - fromCIDR:
+            - 10.0.0.0/8
         - fromEntities:
             - world
           toPorts:

diff --git a/templates/flavors/rke2/ciliumNetworkPolicies.yaml b/templates/flavors/rke2/ciliumNetworkPolicies.yaml
@@ -16,6 +16,7 @@ data:
             - cluster
         - fromCIDR:
             - 10.0.0.0/8
+            - 192.168.128.0/17
     ---
     apiVersion: "cilium.io/v2"
     kind: CiliumClusterwideNetworkPolicy