Restrict worker egress and publish manifest

2026-10-20 11:42:13 +02:00
parent 6f67b8012f
commit c4403f297a
3 changed files with 10 additions and 7 deletions
@@ -12,6 +12,7 @@ spec:
    - to:
        - podSelector:
            matchLabels:
+              app.kubernetes.io/name: ai-spel-nats
              app.kubernetes.io/instance: ai-spel-nats
      ports:
        - protocol: TCP
@@ -20,9 +21,6 @@ spec:
        - namespaceSelector:
            matchLabels:
              kubernetes.io/metadata.name: kube-system
-          podSelector:
-            matchLabels:
-              k8s-app: kube-dns
      ports:
        - protocol: UDP
          port: 53