mirror of
https://github.com/whyour/qinglong.git
synced 2026-09-21 01:32:44 +08:00
13 lines
399 B
YAML
13 lines
399 B
YAML
# Example only. Copy into a private overlay and replace the placeholder with
|
|
# the exact Kubernetes API endpoint CIDR. The base policy intentionally has no
|
|
# broad TCP/443 escape hatch, so the controller fails closed without this rule.
|
|
- op: add
|
|
path: /spec/egress/-
|
|
value:
|
|
to:
|
|
- ipBlock:
|
|
cidr: REPLACE_WITH_API_SERVER_CIDR
|
|
ports:
|
|
- protocol: TCP
|
|
port: 443
|