aboutsummaryrefslogtreecommitdiffstats
path: root/syz-cluster
diff options
context:
space:
mode:
authorAleksandr Nogikh <nogikh@google.com>2025-07-09 13:26:37 +0200
committerAleksandr Nogikh <nogikh@google.com>2025-07-09 13:21:07 +0000
commit956bd956bb0433519b165665a40c8f2463bdf21a (patch)
tree2ec6b9bdabbf2c194bc866a1678362700e9196c4 /syz-cluster
parent5f8be100fba089739ebaa117b87a834a3f4bcd7a (diff)
syz-cluster: add reporter-server firewall policy
Enable access from email-reporter.
Diffstat (limited to 'syz-cluster')
-rw-r--r--syz-cluster/overlays/common/kustomization.yaml1
-rw-r--r--syz-cluster/overlays/common/network-policy-reporter.yaml18
2 files changed, 19 insertions, 0 deletions
diff --git a/syz-cluster/overlays/common/kustomization.yaml b/syz-cluster/overlays/common/kustomization.yaml
index 09d0c1e18..27e084428 100644
--- a/syz-cluster/overlays/common/kustomization.yaml
+++ b/syz-cluster/overlays/common/kustomization.yaml
@@ -13,6 +13,7 @@ resources:
- network-policy-git-access.yaml
- network-policy-web-dashboard.yaml
- network-policy-email-sender.yaml
+ - network-policy-reporter.yaml
patches:
- target:
diff --git a/syz-cluster/overlays/common/network-policy-reporter.yaml b/syz-cluster/overlays/common/network-policy-reporter.yaml
new file mode 100644
index 000000000..07a1d35d8
--- /dev/null
+++ b/syz-cluster/overlays/common/network-policy-reporter.yaml
@@ -0,0 +1,18 @@
+# Copyright 2025 syzkaller project authors. All rights reserved.
+# Use of this source code is governed by Apache 2 LICENSE that can be found in the LICENSE file.
+
+apiVersion: networking.k8s.io/v1
+kind: NetworkPolicy
+metadata:
+ name: reporter-server-access
+spec:
+ podSelector:
+ matchLabels:
+ app: reporter-server
+ policyTypes:
+ - Ingress
+ ingress:
+ - from:
+ - podSelector:
+ matchLabels:
+ app: email-reporter