Restrict-droptailer (#230)

metal-stack · Jan 12, 2022 · 3aabb42 · 3aabb42
1 parent 21cf42b
commit 3aabb42
Showing 1 changed file with 13 additions and 0 deletions.
diff --git a/charts/internal/shoot-control-plane/templates/firewall/droptailer.yaml b/charts/internal/shoot-control-plane/templates/firewall/droptailer.yaml
@@ -1,4 +1,16 @@
 ---
+apiVersion: networking.k8s.io/v1
+kind: NetworkPolicy
+metadata:
+  name: droptailer
+  namespace: firewall
+spec:
+  podSelector:
+    matchLabels:
+      k8s-app: droptailer
+  policyTypes:
+  - Egress
+---
 apiVersion: apps/v1
 kind: Deployment
 metadata:
@@ -42,6 +54,7 @@ spec:
             cpu: 50m
             memory: 200Mi
       restartPolicy: Always
+      automountServiceAccountToken: false
       volumes:
       - name: droptailer-server
         secret: