mirror of
https://github.com/rubenhensen/k8scd.git
synced 2026-11-15 14:29:09 +01:00
15 lines
517 B
YAML
15 lines
517 B
YAML
# Nothing runs in default (2026-10-26: only the kubernetes Service, whose
|
|
# endpoint is the API server on the node, which this doesn't touch). A pod
|
|
# started here, by `kubectl run` or a manifest without a namespace, gets
|
|
# no network at all, instead of reaching the LAN, Vault and every app.
|
|
# Anything that needs a network gets a namespace and a policy of its own.
|
|
apiVersion: networking.k8s.io/v1
|
|
kind: NetworkPolicy
|
|
metadata:
|
|
name: default-deny
|
|
spec:
|
|
podSelector: {}
|
|
policyTypes:
|
|
- Ingress
|
|
- Egress
|