Skip to content

Commit

Permalink
review
Browse files Browse the repository at this point in the history
  • Loading branch information
@Rachael-Graham
Rachael-Graham committed Apr 27, 2021
1 parent ac656da commit 800fec2
Show file tree
Hide file tree
Showing 9 changed files with 36 additions and 81 deletions.
24 changes: 12 additions & 12 deletions calico-policies/private-network-isolation/calico-v3/ca-tor/allow-egress-pods-private.yaml
View file
Expand Up @@ -70,12 +70,12 @@ spec:
destination:
nets:
# Nets for Toronto multizone location: tor01, tor04, tor05
- 166.9.76.6/32
- 166.9.76.8/32
- 166.9.77.6/32
- 166.9.77.8/32
- 166.9.78.6/32
- 166.9.78.8/32
- 166.9.76.5/32
- 166.9.76.7/32
- 166.9.77.5/32
- 166.9.77.7/32
- 166.9.78.5/32
- 166.9.78.7/32
ports:
- 20000:32767
protocol: UDP
Expand All @@ -84,12 +84,12 @@ spec:
destination:
nets:
# Nets for Toronto multizone location: tor01, tor04, tor05
- 166.9.76.6/32
- 166.9.76.8/32
- 166.9.77.6/32
- 166.9.77.8/32
- 166.9.78.6/32
- 166.9.78.8/32
- 166.9.76.5/32
- 166.9.76.7/32
- 166.9.77.5/32
- 166.9.77.7/32
- 166.9.78.5/32
- 166.9.78.7/32
ports:
- 20000:32767
protocol: TCP
Expand Down
6 changes: 2 additions & 4 deletions calico-policies/private-network-isolation/calico-v3/ca-tor/allow-ibm-ports-private.yaml
View file
Expand Up @@ -51,16 +51,14 @@ spec:
ports:
- 443
nets:
- 172.21.0.1/32 # For clusters created <3 years ago
- 10.10.10.1/32 # For clusters created >3 years ago
- 172.21.0.1/32
protocol: UDP
- action: Allow
destination:
ports:
- 443
nets:
- 172.21.0.1/32 # For clusters created <3 years ago
- 10.10.10.1/32 # For clusters created >3 years ago
- 172.21.0.1/32
protocol: TCP
ingress:
- action: Allow
Expand Down
24 changes: 12 additions & 12 deletions ...o-policies/private-network-isolation/calico-v3/ca-tor/allow-private-service-endpoint.yaml
View file
Expand Up @@ -15,12 +15,12 @@ spec:
destination:
nets:
# Nets for Toronto multizone location: tor01, tor04, tor05
- 166.9.76.6/32
- 166.9.76.8/32
- 166.9.77.6/32
- 166.9.77.8/32
- 166.9.78.6/32
- 166.9.78.8/32
- 166.9.76.5/32
- 166.9.76.7/32
- 166.9.77.5/32
- 166.9.77.7/32
- 166.9.78.5/32
- 166.9.78.7/32
ports:
- 20000:32767
- 443
Expand All @@ -30,12 +30,12 @@ spec:
destination:
nets:
# Nets for Toronto multizone location: tor01, tor04, tor05
- 166.9.76.6/32
- 166.9.76.8/32
- 166.9.77.6/32
- 166.9.77.8/32
- 166.9.78.6/32
- 166.9.78.8/32
- 166.9.76.5/32
- 166.9.76.7/32
- 166.9.77.5/32
- 166.9.77.7/32
- 166.9.78.5/32
- 166.9.78.7/32
ports:
- 20000:32767
- 443
Expand Down
37 changes: 0 additions & 37 deletions calico-policies/private-network-isolation/calico-v3/ca-tor/generic-privatehostendpoint.yaml
View file

This file was deleted.

6 changes: 2 additions & 4 deletions calico-policies/private-network-isolation/calico-v3/jp-osa/allow-ibm-ports-private.yaml
View file
Expand Up @@ -51,16 +51,14 @@ spec:
ports:
- 443
nets:
- 172.21.0.1/32 # For clusters created <3 years ago
- 10.10.10.1/32 # For clusters created >3 years ago
- 172.21.0.1/32
protocol: UDP
- action: Allow
destination:
ports:
- 443
nets:
- 172.21.0.1/32 # For clusters created <3 years ago
- 10.10.10.1/32 # For clusters created >3 years ago
- 172.21.0.1/32
protocol: TCP
ingress:
- action: Allow
Expand Down
4 changes: 2 additions & 2 deletions calico-policies/public-network-isolation/ca-tor/allow-egress-pods-public.yaml
View file
Expand Up @@ -54,7 +54,7 @@ spec:
- action: Allow
destination:
nets:
# Nets for US East: mon01, tor01, wdc04, wdc06, wdc07
# Nets for Toronto multizone location: tor01, tor04, tor05
- 158.85.77.114/32
- 158.85.110.18/32
- 163.74.65.242/32
Expand All @@ -68,7 +68,7 @@ spec:
- action: Allow
destination:
nets:
# Nets for US East: mon01, tor01, wdc04, wdc06, wdc07
# Nets for Toronto multizone location: tor01, tor04, tor05
- 158.85.77.114/32
- 158.85.110.18/32
- 163.74.65.242/32
Expand Down
6 changes: 2 additions & 4 deletions calico-policies/public-network-isolation/ca-tor/allow-ibm-ports-public.yaml
View file
Expand Up @@ -38,16 +38,14 @@ spec:
ports:
- 443
nets:
- 172.21.0.1/32 # For clusters created <3 years ago
- 10.10.10.1/32 # For clusters created >3 years ago
- 172.21.0.1/32
protocol: UDP
- action: Allow
destination:
ports:
- 443
nets:
- 172.21.0.1/32 # For clusters created <3 years ago
- 10.10.10.1/32 # For clusters created >3 years ago
- 172.21.0.1/32
protocol: TCP
- action: Allow
destination:
Expand Down
4 changes: 2 additions & 2 deletions calico-policies/public-network-isolation/ca-tor/allow-public-service-endpoint.yaml
View file
Expand Up @@ -14,7 +14,7 @@ spec:
- action: Allow
destination:
nets:
# Nets for US East: mon01, tor01, wdc04, wdc06, wdc07
# Nets for Toronto multizone location: tor01, tor04, tor05
- 158.85.77.114/32
- 158.85.110.18/32
- 163.74.65.242/32
Expand All @@ -29,7 +29,7 @@ spec:
- action: Allow
destination:
nets:
# Nets for US East: mon01, tor01, wdc04, wdc06, wdc07
# Nets for Toronto multizone location: tor01, tor04, tor05
- 158.85.77.114/32
- 158.85.110.18/32
- 163.74.65.242/32
Expand Down
6 changes: 2 additions & 4 deletions calico-policies/public-network-isolation/jp-osa/allow-ibm-ports-public.yaml
View file
Expand Up @@ -38,16 +38,14 @@ spec:
ports:
- 443
nets:
- 172.21.0.1/32 # For clusters created <3 years ago
- 10.10.10.1/32 # For clusters created >3 years ago
- 172.21.0.1/32
protocol: UDP
- action: Allow
destination:
ports:
- 443
nets:
- 172.21.0.1/32 # For clusters created <3 years ago
- 10.10.10.1/32 # For clusters created >3 years ago
- 172.21.0.1/32
protocol: TCP
- action: Allow
destination:
Expand Down

0 comments on commit 800fec2

Please sign in to comment.