fix: disable all ingress traffic to tetragon namespace

camptocamp · Feb 21, 2024 · 0a52dae · 0a52dae
1 parent 7dce44f
commit 0a52dae
Show file tree

Hide file tree

Showing 2 changed files with 15 additions and 1 deletion.
diff --git a/helm/tetragon-policy-builder/Chart.yaml b/helm/tetragon-policy-builder/Chart.yaml
@@ -1,4 +1,4 @@
 apiVersion: v2
 name: tetragon-policy-builder
 description: Deploy a policy builder to read events from tetragon and create policy
-version: 0.1.0
+version: 0.1.1
diff --git a/helm/tetragon-policy-builder/templates/networkpolicy.yaml b/helm/tetragon-policy-builder/templates/networkpolicy.yaml
@@ -0,0 +1,14 @@
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+  name: {{ include "tetragon-policy-builder.fullname" . }}
+  labels:
+    {{- include "tetragon-policy-builder.labels" . | nindent 4 }}
+spec:
+  policyTypes:
+  - Ingress
+  podSelector:
+    matchLabels: {}
+  ingress:
+    - from:
+        - podSelector: {}