chore(add-ons): Add network policies to operators and monitoring

2026-10-28 15:27:26 +05:30
parent 49ee2a29f5
commit e4346af5ba
8 changed files with 181 additions and 16 deletions
@@ -29,7 +29,18 @@ spec:
            requests:
              cpu: 10m
              memory: 64Mi
+          # The chart's egress fits the controller: ACME and Cloudflare on 443,
+          # DNS-01 propagation checks on 53, and the API on 6443
+          networkPolicy:
+            enabled: true
          cainjector:
+            # Only talks to the API
+            networkPolicy:
+              enabled: true
+              egress:
+                - ports:
+                    - port: 6443
+                      protocol: TCP
            resources:
              limits:
                cpu: 200m
@@ -38,6 +49,13 @@ spec:
                cpu: 10m
                memory: 64Mi
          webhook:
+            # Only talks to the API
+            networkPolicy:
+              enabled: true
+              egress:
+                - ports:
+                    - port: 6443
+                      protocol: TCP
            resources:
              limits:
                cpu: 200m