feat: added support for network policy

Signed-off-by: VedRatan <vedratan8@gmail.com>
5GSEC · Sep 3, 2024 · 0230bed · 0230bed
1 parent bddc225
commit 0230bed
Showing 1 changed file with 79 additions and 7 deletions.
diff --git a/vp.json b/vp.json
@@ -1,6 +1,6 @@
 [
     {
-      "image": "image2",
+      "image": "nginx:latest",
       "cves": [
         {
           "cve": "CVE-2024-4439",
@@ -52,20 +52,21 @@
                                 "resources": {
                                   "kinds": [
                                     "Pod"
-                                  ]
-                                },
-                                "selector": {
-                                  "matchLabels": {
-                                    "app": "prod"
+                                  ],
+                                  "selector": {
+                                    "matchLabels": {
+                                      "app": "test"
                                   }
                                 }
                               }
+
+                              }
                             ]
                           },
                           "preconditions": {
                             "all": [
                               {
-                                "key": "nginx",
+                                "key": "busybox",
                                 "operator": "AnyIn",
                                 "value": "{{ images.containers.*.name }}"
                               }
@@ -87,6 +88,77 @@
                       ]
                     }
                   }
+            },
+            {
+              "netpol": {
+                "apiVersion": "networking.k8s.io/v1",
+                "kind": "NetworkPolicy",
+                "metadata": {
+                    "name": "test-network-policy"
+                },
+                "spec": {
+                    "podSelector": {
+                        "matchLabels": {
+                            "role": "db"
+                        }
+                    },
+                    "policyTypes": [
+                        "Ingress",
+                        "Egress"
+                    ],
+                    "ingress": [
+                        {
+                            "from": [
+                                {
+                                    "ipBlock": {
+                                        "cidr": "172.17.0.0/16",
+                                        "except": [
+                                            "172.17.1.0/24"
+                                        ]
+                                    }
+                                },
+                                {
+                                    "namespaceSelector": {
+                                        "matchLabels": {
+                                            "project": "myproject"
+                                        }
+                                    }
+                                },
+                                {
+                                    "podSelector": {
+                                        "matchLabels": {
+                                            "role": "frontend"
+                                        }
+                                    }
+                                }
+                            ],
+                            "ports": [
+                                {
+                                    "protocol": "TCP",
+                                    "port": 6379
+                                }
+                            ]
+                        }
+                    ],
+                    "egress": [
+                        {
+                            "to": [
+                                {
+                                    "ipBlock": {
+                                        "cidr": "10.0.0.0/24"
+                                    }
+                                }
+                            ],
+                            "ports": [
+                                {
+                                    "protocol": "TCP",
+                                    "port": 5978
+                                }
+                            ]
+                        }
+                    ]
+                }
+            }
             }
           ]
         }