Skip to content
This repository has been archived by the owner on Dec 3, 2021. It is now read-only.

Commit

Permalink
Convert networkpolicy to use blank namespace selector instead of RFC1918
Browse files Browse the repository at this point in the history
Signed-off-by: Matt Oswalt <matt@oswalt.dev>
  • Loading branch information
Mierdin committed Dec 9, 2020
1 parent 4b8cfe3 commit 239050b
Showing 1 changed file with 2 additions and 4 deletions.
6 changes: 2 additions & 4 deletions scheduler/networks.go
Original file line number Diff line number Diff line change
Expand Up @@ -97,10 +97,8 @@ func (s *AntidoteScheduler) createNetworkPolicy(sc ot.SpanContext, nsName string

// Have only been able to get this working with this CIDR.
// Tried a /32 directly to the svc IP for DNS, but that didn't seem to work.
// Should revisit this later. Open to all RFC1918 for now.
{IPBlock: &netv1.IPBlock{CIDR: "10.0.0.0/8"}},
{IPBlock: &netv1.IPBlock{CIDR: "192.168.0.0/16"}},
{IPBlock: &netv1.IPBlock{CIDR: "171.16.0.0/12"}},
// Should revisit this later. Open to all cluster namespaces for now.
{NamespaceSelector: &meta_v1.LabelSelector{}},
},
Ports: []netv1.NetworkPolicyPort{
{Protocol: &tcp, Port: &fivethree},
Expand Down

0 comments on commit 239050b

Please # to comment.