UNCLASSIFIED - NO CUI

Skip to content
Snippets Groups Projects

NetworkPolicy to facilitate Defenders to Console WebSocket comms

Merged Ryan Garcia requested to merge 721-defenders-np into main
All threads resolved!
Files
4
{{- if .Values.networkPolicies.enabled }}
apiVersion: networking.k8s.io/v1
kind: NetworkPolicy
metadata:
name: allow-defender-to-console
namespace: twistlock
spec:
podSelector:
matchLabels:
name: twistlock-console
policyTypes:
- Ingress
ingress:
- from:
{{- if .Values.networkPolicies.nodeCidr }}
- ipBlock:
cidr: {{ .Values.networkPolicies.nodeCidr }}
{{- else }}
{{- range tuple "10.0.0.0/8" "172.16.0.0/12" "192.168.0.0/16" "100.64.0.0/10" }}
- ipBlock:
cidr: {{ . }}
{{- end }}
{{- end }}
ports:
- port: 8084
{{- end }}
Loading