Files
gitops/apps/jellyfin/networkpolicy-ldap.yaml

26 lines
685 B
YAML

# Lets Jellyfin's LDAP plugin reach authentik's LDAP outpost (LDAPS).
# Adds to the chart's policy, which keeps Jellyfin off the cluster network.
apiVersion: networking.k8s.io/v1
kind: NetworkPolicy
metadata:
name: jellyfin-to-ldap
namespace: jellyfin
spec:
egress:
- ports:
- port: 6636
protocol: TCP
to:
- namespaceSelector:
matchLabels:
kubernetes.io/metadata.name: authentik
podSelector:
matchLabels:
goauthentik.io/outpost-name: ldap
podSelector:
matchLabels:
app.kubernetes.io/name: jellyfin
app.kubernetes.io/instance: jellyfin
policyTypes:
- Egress