Skip to content

fix(dns): Allow external-dns in network policy #1021

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
rmvangun merged 1 commit into from
Nov 12, 2025
Merged

fix(dns): Allow external-dns in network policy #1021

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
49 changes: 28 additions & 21 deletions kustomize/dns/coredns/etcd/network-policy.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -18,37 +18,44 @@ spec:
matchLabels:
app: etcd
ports:
- protocol: TCP
port: 2380
# Allow client connections from CoreDNS
- port: 2380
protocol: TCP
# Allow CoreDNS to connect to etcd client endpoint
- from:
- podSelector:
matchLabels:
app: coredns
app.kubernetes.io/name: coredns
ports:
- protocol: TCP
port: 2379
- port: 2379
protocol: TCP
# Allow external-dns to connect to etcd client endpoint
- from:
- podSelector:
matchLabels:
app.kubernetes.io/name: external-dns
ports:
- port: 2379
protocol: TCP
egress:
# Allow DNS resolution
- to: []
ports:
- protocol: UDP
port: 53
- protocol: TCP
port: 53
- ports:
- port: 53
protocol: UDP
- port: 53
protocol: TCP
# Allow etcd peer communication
- to:
- ports:
- port: 2380
protocol: TCP
to:
- podSelector:
matchLabels:
app: etcd
ports:
- protocol: TCP
port: 2380
# Allow client connections to other etcd instances
- to:
# Allow etcd client communication (for cluster operations)
- ports:
- port: 2379
protocol: TCP
to:
- podSelector:
matchLabels:
app: etcd
ports:
- protocol: TCP
port: 2379
Loading