DDD1542
51 lines
1.1 KiB
YAML
51 lines
1.1 KiB
YAML
# NetworkPolicy: frontend는 backend에만 접근 가능
|
|
apiVersion: networking.k8s.io/v1
|
|
kind: NetworkPolicy
|
|
metadata:
|
|
name: frontend-policy
|
|
namespace: invyone
|
|
spec:
|
|
podSelector:
|
|
matchLabels:
|
|
app: frontend
|
|
policyTypes:
|
|
- Egress
|
|
egress:
|
|
# backend-spring 접근 허용
|
|
- to:
|
|
- podSelector:
|
|
matchLabels:
|
|
app: backend-spring
|
|
ports:
|
|
- port: 8081
|
|
# DNS 허용
|
|
- to: []
|
|
ports:
|
|
- port: 53
|
|
protocol: UDP
|
|
- port: 53
|
|
protocol: TCP
|
|
---
|
|
# NetworkPolicy: backend는 외부 DB 접근만 허용
|
|
apiVersion: networking.k8s.io/v1
|
|
kind: NetworkPolicy
|
|
metadata:
|
|
name: backend-policy
|
|
namespace: invyone
|
|
spec:
|
|
podSelector:
|
|
matchLabels: {}
|
|
policyTypes:
|
|
- Ingress
|
|
ingress:
|
|
# 같은 네임스페이스 내 트래픽 허용
|
|
- from:
|
|
- namespaceSelector:
|
|
matchLabels:
|
|
kubernetes.io/metadata.name: invyone
|
|
# NodePort 외부 트래픽 허용 (Traefik에서 들어오는 트래픽)
|
|
- from: []
|
|
ports:
|
|
- port: 3000
|
|
- port: 8081
|