veza/k8s/network-policies/default-deny.yaml

24 lines
500 B
YAML
Raw Normal View History

# Default deny all ingress and egress
# Apply this first; then apply allow policies for each component.
# See README.md for dependency documentation.
---
apiVersion: networking.k8s.io/v1
kind: NetworkPolicy
metadata:
name: default-deny-ingress
namespace: veza-production
spec:
podSelector: {}
policyTypes:
- Ingress
---
apiVersion: networking.k8s.io/v1
kind: NetworkPolicy
metadata:
name: default-deny-egress
namespace: veza-production
spec:
podSelector: {}
policyTypes:
- Egress