fix(base-cluster): allow all protocols for DNS (#1306)

teutonet · Feb 3, 2025 · 829ed95 · 829ed95
1 parent 1276209
commit 829ed95
Show file tree

Hide file tree

Showing 4 changed files with 0 additions and 5 deletions.
diff --git a/charts/base-cluster/templates/cert-manager/ciliumNetworkPolicy.yaml b/charts/base-cluster/templates/cert-manager/ciliumNetworkPolicy.yaml
@@ -30,7 +30,6 @@ spec:
     - toPorts: # needs to talk to all possible DNS servers
         - ports:
             - port: "53"
-              protocol: UDP
           rules:
             dns:
               - matchPattern: "*"

diff --git a/charts/base-cluster/templates/global/ciliumClusterwideNetworkPolicy.yaml b/charts/base-cluster/templates/global/ciliumClusterwideNetworkPolicy.yaml
@@ -21,7 +21,6 @@ spec:
       toPorts:
         - ports:
             - port: "53"
-              protocol: UDP
           rules:
             dns:
               - matchPattern: "*"
@@ -43,5 +42,4 @@ spec:
       toPorts:
         - ports:
             - port: "53"
-              protocol: UDP
 {{- end }}
diff --git a/charts/base-cluster/templates/monitoring/deadMansSwitch/ciliumNetworkPolicy.yaml b/charts/base-cluster/templates/monitoring/deadMansSwitch/ciliumNetworkPolicy.yaml
@@ -29,7 +29,6 @@ spec:
       toPorts:
         - ports:
             - port: "53"
-              protocol: UDP
           rules:
             dns:
               - matchName: hc-ping.com

diff --git a/charts/base-cluster/templates/monitoring/kube-prometheus-stack/oauth-proxy.yaml b/charts/base-cluster/templates/monitoring/kube-prometheus-stack/oauth-proxy.yaml
@@ -109,7 +109,6 @@ spec:
       toPorts:
         - ports:
             - port: "53"
-              protocol: UDP
           rules:
             dns:
               - matchName: {{ $.Values.global.authentication.config.issuerHost | quote }}