Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

Put in place Cincinatti egress policy

Browse source 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
This commit is contained in:
Patrick Uiterwijk 2019-06-20 09:55:24 +02:00
parent 43af7f9206
commit 24963d3673
2 changed files with 14 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

1
playbooks/openshift-apps/coreos-cincinnati.yml
View file

@ -20,6 +20,7 @@
- jlebon - jlebon
- lucab - lucab
- sanja - sanja
egress_policy_template: "{{ roles_path }}/openshift-apps/coreos-cincinnati/templates/egresspolicy.yml"
- role: openshift/imagestream - role: openshift/imagestream
app: coreos-cincinnati app: coreos-cincinnati

13
roles/openshift-apps/coreos-cincinnati/templates/egresspolicy.yml Normal file
View file

@ -0,0 +1,13 @@
---
apiVersion: v1
kind: EgressNetworkPolicy
metadata:
name: default
spec:
egress:
- type: Allow
to:
dnsName: builds.coreos.fedoraproject.org
- type: Deny
to:
cidrSelector: "0.0.0.0/0"