adb617ab60
This patch set specifies the barbican egress in the override to be inline with other services. Change-Id: Ie4997a5bb476a21253e98e4c69a77e58b8498f4f Signed-off-by: Tin Lam <tin@irrational.io> Signed-off-by: Tin Lam <tlam@omegaprime.dev>
35 lines
774 B
YAML
35 lines
774 B
YAML
manifests:
|
|
network_policy: true
|
|
|
|
network_policy:
|
|
barbican:
|
|
ingress:
|
|
- from:
|
|
- podSelector:
|
|
matchLabels:
|
|
application: barbican
|
|
- podSelector:
|
|
matchLabels:
|
|
application: ingress
|
|
- podSelector:
|
|
matchLabels:
|
|
application: horizon
|
|
- podSelector:
|
|
matchLabels:
|
|
application: heat
|
|
- podSelector:
|
|
matchLabels:
|
|
application: magnum
|
|
ports:
|
|
- protocol: TCP
|
|
port: 80
|
|
- protocol: TCP
|
|
port: 9311
|
|
egress:
|
|
- to:
|
|
- ipBlock:
|
|
cidr: %%%REPLACE_API_ADDR%%%/32
|
|
ports:
|
|
- protocol: TCP
|
|
port: %%%REPLACE_API_PORT%%%
|