Open port 8080 and 22 outbound for OHW

Ref 2i2c-org#549 (comment)
yuvipanda · Aug 4, 2021 · 5a79554 · 5a79554
1 parent e828bb5
commit 5a79554
Showing 1 changed file with 22 additions and 0 deletions.
diff --git a/config/hubs/2i2c.cluster.yaml b/config/hubs/2i2c.cluster.yaml
@@ -117,6 +117,28 @@ hubs:
             continuous:
               enabled: true
           singleuser:
+            networkPolicy:
+              # In clusters with NetworkPolicy enabled, do not
+              # allow outbound internet access that's not DNS, HTTP or HTTPS
+              # For OHW, we allow 8080 (for DAP) and 22 (for ssh)
+              # https://github.com/2i2c-org/pilot-hubs/issues/549#issuecomment-892276020
+              enabled: true
+              egress:
+                - ports:
+                    - port: 53
+                      protocol: UDP
+                - ports:
+                    - port: 80
+                      protocol: TCP
+                - ports:
+                    - port: 443
+                      protocol: TCP
+                - ports:
+                    - port: 8080
+                      protocol: TCP
+                - ports:
+                    - port: 22
+                      protocol: TCP
             image:
               name: ghcr.io/oceanhackweek/jupyer-image
               tag: 9efd4fb