fix: nVidia plugin missing network policy

homecentr · Nov 7, 2023 · cf946dd · cf946dd
1 parent 627e6b7
commit cf946dd
Showing 1 changed file with 23 additions and 0 deletions.
diff --git a/apps/nvidia-device-plugin/templates/network-policy-plugin.yml b/apps/nvidia-device-plugin/templates/network-policy-plugin.yml
@@ -0,0 +1,23 @@
+apiVersion: networking.k8s.io/v1
+kind: NetworkPolicy
+metadata:
+  name: {{ $.Release.Namespace }}-plugin
+  namespace: {{ $.Release.Namespace }}
+  labels:
+    {{- include "common.resource-labels" . | indent 4 }}
+spec:
+  podSelector:
+    matchLabels:
+      app.kubernetes.io/name: {{ $.Release.Name }}
+  ingress:
+    # Accept traffic from all pods within the namespace
+    - from:
+      - namespaceSelector:
+          matchLabels:
+            kubernetes.io/metadata.name: {{ $.Release.Namespace }}
+        podSelector: {}
+  egress:
+    {{- include "common.egress-kubeapi" . | nindent 4 }}
+  policyTypes:
+  - Ingress
+  - Egress