adds the DNS port

Author: siddhibhor-56

bindata/external-secrets/networkpolicy_allow-dns.yaml

@@ -0,0 +1,28 @@
+apiVersion: networking.k8s.io/v1
+kind: NetworkPolicy
+metadata:
+  labels:
+    app.kubernetes.io/name: external-secrets
+    app.kubernetes.io/instance: external-secrets
+    app.kubernetes.io/version: "v0.19.0"
+    app.kubernetes.io/managed-by: external-secrets-operator
+  name: allow-to-dns
+spec:
+  podSelector:
+    matchLabels:
+      app.kubernetes.io/name: external-secrets
+  egress:
+    - to:
+        - namespaceSelector:
+            matchLabels:
+              kubernetes.io/metadata.name: openshift-dns
+          podSelector:
+            matchLabels:
+              dns.operator.openshift.io/daemonset-dns: default
+      ports:
+        - protocol: TCP
+          port: 5353
+        - protocol: UDP
+          port: 5353
+  policyTypes:
+      - Egress

pkg/controller/external_secrets/constants.go

@@ -101,6 +101,7 @@ const (
 	allowWebhookTrafficAssetName                  = "external-secrets/networkpolicy_allow-api-server-and-webhook-traffic.yaml"
 	allowCertControllerTrafficAssetName           = "external-secrets/networkpolicy_allow-api-server-egress-for-cert-controller-traffic.yaml"
 	allowBitwardenServerTrafficAssetName          = "external-secrets/networkpolicy_allow-api-server-egress-for-bitwarden-sever.yaml"
+	allowDnsTrafficAsserName                      = "external-secrets/networkpolicy_allow-dns.yaml"
 )
 
 var (

pkg/controller/external_secrets/networkpolicy.go

@@ -56,6 +56,10 @@ func (r *Reconciler) createOrApplyStaticNetworkPolicies(esc *operatorv1alpha1.Ex
 			assetName: allowBitwardenServerTrafficAssetName,
 			condition: isBitwardenConfigEnabled(esc), // Only if bitwarden is enabled
 		},
+		{
+			assetName: allowDnsTrafficAsserName,
+			condition: true,
+		},
 	}
 
 	// Apply static network policies based on conditions

pkg/operator/assets/bindata.go

@@ -19,6 +19,6 @@ spec:
             - protocol: TCP
               port: 443   # HTTPS (AWS Secrets Manager)
             - protocol: TCP
-              port: 53    # DNS
+              port: 5353    # DNS
             - protocol: UDP
-              port: 53    # DNS
+              port: 5353    # DNS