Skip to content

Commit 7f050c9

Browse files
committed
deny-all changes
1 parent c3e70d4 commit 7f050c9

File tree

2 files changed

+6
-2
lines changed

2 files changed

+6
-2
lines changed

config/default/kustomization.yaml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -31,7 +31,7 @@ resources:
3131
# Only Pod(s) running a namespace labeled with 'metrics: enabled' will be able to gather the metrics.
3232
# Only CR(s) which requires webhooks and are applied on namespaces labeled with 'webhooks: enabled' will
3333
# be able to communicate with the Webhook Server.
34-
- ../network-policy
34+
#- ../network-policy
3535

3636
# Uncomment the patches line if you enable Metrics, and/or are using webhooks and cert-manager
3737
patches:

config/network-policy/deny-all.yaml

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,8 +1,12 @@
11
apiVersion: networking.k8s.io/v1
22
kind: NetworkPolicy
33
metadata:
4+
labels:
5+
app: external-secrets-operator
6+
app.kubernetes.io/name: external-secrets-operator
7+
app.kubernetes.io/managed-by: kustomize
48
name: deny-all-traffic
5-
namespace: external-secrets-operator
9+
namespace: system
610
spec:
711
podSelector:
812
matchLabels:

0 commit comments

Comments
 (0)