examples: Allow remote nodes in host policy example

To be on the safe side and avoid breaking the cluster, we can allow remote nodes and the health endpoint. Without this, we will at least drop some ICMP probes. Signed-off-by: Paul Chaignon <paul@cilium.io>
cilium · Jul 20, 2020 · e931b3c · e931b3c
1 parent 789abf5
commit e931b3c
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/examples/policies/host/lock-down-ingress.yaml b/examples/policies/host/lock-down-ingress.yaml
@@ -8,6 +8,9 @@ spec:
     matchLabels:
       type: ingress-worker
   ingress:
+  - fromEntities:
+    - remote-node
+    - health
   - toPorts:
     - ports:
       - port: "6443"