From 34f434cf7377379cb388fe8385a600837942cad0 Mon Sep 17 00:00:00 2001 From: YuryHrytsuk Date: Wed, 1 Oct 2025 10:22:22 +0200 Subject: [PATCH] Kubernetes: fix global network policy --- .../templates/globalpolicy.yaml | 18 ++++++++++-------- 1 file changed, 10 insertions(+), 8 deletions(-) diff --git a/charts/calico-configuration/templates/globalpolicy.yaml b/charts/calico-configuration/templates/globalpolicy.yaml index cb579df28..30d787f06 100644 --- a/charts/calico-configuration/templates/globalpolicy.yaml +++ b/charts/calico-configuration/templates/globalpolicy.yaml @@ -26,10 +26,11 @@ spec: # IP from https://github.com/kubernetes-sigs/kubespray/blob/v2.24.1/roles/kubespray-defaults/defaults/main/main.yml#L108 - action: Allow protocol: UDP - nets: - - 169.254.25.10/32 - ports: - - 53 + destination: + nets: + - 169.254.25.10/32 + ports: + - 53 - action: Allow protocol: TCP destination: @@ -38,7 +39,8 @@ spec: - 53 - action: Allow protocol: TCP - nets: - - 169.254.25.10/32 - ports: - - 53 + destination: + nets: + - 169.254.25.10/32 + ports: + - 53