bluejay/bluejay-infra
1
0
Fork 0
Code Issues Pull Requests 15 Actions Packages Projects Releases Wiki Activity

Apply SEC-7 baseline to WorldBuilder

Browse Source
This commit is contained in:
Andrew Stoltz
2026-06-21 02:57:57 -05:00
parent cea1fcc609
commit 11122b5139
4 changed files with 122 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

93
apps-gx10/fc-worldbuilder/networkpolicy-worldbuilder-web.json Normal file
View File

@@ -0,0 +1,93 @@
{
"apiVersion": "networking.k8s.io/v1",
"kind": "NetworkPolicy",
"metadata": {
"name": "worldbuilder-web",
"namespace": "fc-worldbuilder"
},
"spec": {
"podSelector": {
"matchLabels": {
"app.kubernetes.io/name": "worldbuilder-web"
}
},
"policyTypes": [
"Ingress",
"Egress"
],
"ingress": [
{
"from": [
{
"namespaceSelector": {
"matchLabels": {
"kubernetes.io/metadata.name": "traefik-system"
}
}
}
],
"ports": [
{
"port": 8080,
"protocol": "TCP"
}
]
},
{
"from": [
{
"namespaceSelector": {
"matchLabels": {
"kubernetes.io/metadata.name": "monitoring"
}
}
}
],
"ports": [
{
"port": 8080,
"protocol": "TCP"
}
]
}
],
"egress": [
{
"to": [
{
"namespaceSelector": {
"matchLabels": {
"kubernetes.io/metadata.name": "kube-system"
}
}
}
],
"ports": [
{
"port": 53,
"protocol": "UDP"
},
{
"port": 53,
"protocol": "TCP"
}
]
},
{
"to": [
{
"ipBlock": {
"cidr": "10.0.56.20/32"
}
}
],
"ports": [
{
"port": 8188,
"protocol": "TCP"
}
]
}
]
}
}